Microsoft’s February 2024 Patch Tuesday Addresses Two Zero-day Vulnerabilities

Summary: Microsofts February 2024 Patch Tuesday addresses 73 vulnerabilities, including actively exploited zero-days, spanning various products like Office, Exchange Server, and Windows Kernel. Critical flaws in Windows SmartScreenCVE-2024-21351, Internet Shortcut FilesCVE-2024-21412, and Microso...

CVE-2024-21371

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-21371

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-21362

Windows Kernel Security Feature Bypass Vulnerability...

CVE-2024-21345

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-21341

Windows Kernel Remote Code Execution Vulnerability...

CVE-2024-21340

Windows Kernel Information Disclosure Vulnerability...

CVE-2024-21338

Windows Kernel Elevation of Privilege Vulnerability...

Security feature bypass

Windows Kernel Security Feature Bypass Vulnerability...

Information disclosure

Windows Kernel Information Disclosure Vulnerability...

Privilege escalation

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-21362 Windows Kernel Security Feature Bypass Vulnerability

...

CVE-2024-21345 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2024-21371 Windows Kernel Elevation of Privilege Vulnerability

...

Windows Kernel Elevation of Privilege Vulnerability

...

Microsoft Windows Kernel Security Vulnerability

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...

VulnCheck KEV: CVE-2024-21338

Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL input and output control dispatcher in appid.sys that allows a local attacker to achieve privilege escalation...

KB5034769: Windows Server version 23H2 Security Update (February 2024)

The remote Windows host is missing security update 5034769. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2024-21350, CVE-2024-21352, CVE-2024-21358, CVE-2024-21359, CVE-2024-21360, CVE-2024-21361,...

KB5034767: Windows 10 Version 1607 and Windows Server 2016 Security Update (February 2024)

The remote Windows host is missing security update 5034767. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2024-21350, CVE-2024-21352, CVE-2024-21358, CVE-2024-21359, CVE-2024-21360, CVE-2024-21361,...

PT-2024-1710 · Microsoft · Windows Ntfs +2

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Microsoft Windows NTFS affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Kernel, which can be exploited due to...