Microsoft and Adobe Patch Tuesday, February 2024 Security Update Review

The new Microsoft Patch Tuesday Edition for February 2024 is now live! We invite you to join us to review and discuss the details of these security updates and patches. Microsoft Patch Tuesday for February 2024 Microsoft Patch Tuesdays February 2024 edition addressed 79 vulnerabilities, including...

Microsoft Releases Security Updates for Multiple Products

Microsoft has released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Microsoft’s February Security Update Guidelink is...

February 13, 2024—KB5034795 (Monthly Rollup)

None None...

February 13, 2024—KB5034767 (OS Build 14393.6709) - EXPIRED

None None...

February 13, 2024—KB5034833 (Security-only update)

None None...

February 13, 2024—KB5034765 (OS Builds 22621.3155 and 22631.3155)

None None...

February 13, 2024—KB5034831 (Monthly Rollup)

None None...

Vulnerability fixed in Microsoft Windows Defender

Microsoft has fixed a vulnerability in Defender for Endpoint. A local malicious agent could exploit the vulnerability to execute arbitrary code with SYSTEM privileges and thus potentially gain access to sensitive data on the system. Microsoft has made updates available that fix the described...

KB5034865: Servicing stack update for Windows Server 2008 R2 SP1: February 13, 2024

None None...

Security Updates for Azure Connected Machine Agent (February 2024)

The Microsoft Azure Connected Machine Agent running on the remote host is prior to 1.38. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVE...

Security Updates for Azure File Sync Agent (February 2024)

The Microsoft Azure File Sync Agent running on the remote host is 16.0 prior to 16.2 or 17.0 prior to 17.1. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Ubuntu 22.04 LTS / 23.10 : .NET vulnerabilities (USN-6634-1)

The remote Ubuntu 22.04 LTS / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6634-1 advisory. Brennan Conroy discovered that .NET with SignalR did not properly handle malicious clients. An attacker could possibly use this issue to cause a...

KB5034866: Servicing stack update for Windows Server 2012 R2: February 13, 2024

KB5034866: Servicing stack update for Windows Server 2012 R2: February 13, 2024 REMINDER Windows 8.1 reached end of support EOS on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows 8.1, we recommend upgrading the...

KB5034868: Servicing stack update for Windows Server 2012: February 13, 2024

KB5034868: Servicing stack update for Windows Server 2012: February 13, 2024 REMINDER Windows Server 2012 reached end of support EOS on October 10, 2023. Extended Security Updates ESUs are available for purchase and will continue for three years, renewable on an annual basis, until the final date...

Vulnerability fixed in Microsoft Exchange

Microsoft has fixed a vulnerability in Exchange Server. A malicious party could exploit the vulnerability to use a previously stolen NTLM hash to gain access to the account and the data of the victim. Successful exploitation thus requires a previous successful attack on a client that uses NTLM...

Security Updates for Microsoft Office Products (February 2024)

The Microsoft Office Products are missing security updates. They are, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for this issue but has...

Security Updates for Microsoft Word Products (February 2024)

The Microsoft Word Products are missing security updates. They are, therefore, affected by multiple remote code execution vulnerabilities. An attacker can exploit these to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has...

KB5034867: Servicing stack update for Windows Server 2008 SP2: February 13, 2024

None None...

RHEL 9 : dotnet6.0 (RHSA-2024:0807)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0807 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

Important: Red Hat Security Advisory: jenkins and jenkins-2-plugins security update

An update for jenkins and jenkins-2-plugins is now available for OpenShift Developer Tools and Services for OCP 4.11. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...