Microsoft’s February 2024 Patch Tuesday Addresses Two Zero-day Vulnerabilities

Summary: Microsofts February 2024 Patch Tuesday addresses 73 vulnerabilities, including actively exploited zero-days, spanning various products like Office, Exchange Server, and Windows Kernel. Critical flaws in Windows SmartScreenCVE-2024-21351, Internet Shortcut FilesCVE-2024-21412, and Microso...

CVE-2024-21371

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-21371

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-21362

Windows Kernel Security Feature Bypass Vulnerability...

CVE-2024-21345

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-21340

Windows Kernel Information Disclosure Vulnerability...

CVE-2024-21338

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2024-21341

Windows Kernel Remote Code Execution Vulnerability...

Privilege escalation

Windows Kernel Elevation of Privilege Vulnerability...

Information disclosure

Windows Kernel Information Disclosure Vulnerability...

Security feature bypass

Windows Kernel Security Feature Bypass Vulnerability...

CVE-2024-21362 Windows Kernel Security Feature Bypass Vulnerability

...

CVE-2024-21345 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2024-21371 Windows Kernel Elevation of Privilege Vulnerability

...

Windows Kernel Elevation of Privilege Vulnerability

...

PT-2024-1705 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows Kernel, which can be exploited by remote attackers to execute arbitrary code and affect the system. Recommendations: At...

PT-2024-1710 · Microsoft · Windows Ntfs +2

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Microsoft Windows NTFS affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Kernel, which can be exploited due to...

VulnCheck KEV: CVE-2024-21338

Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL input and output control dispatcher in appid.sys that allows a local attacker to achieve privilege escalation...

Microsoft Windows Kernel Security Vulnerability

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. The following products and editions are affected:Windows Server 2012,Windows Server 2012 Server Core installation,Windows Server 2012...

KB5034819: Windows Server 2012 R2 Security Update (February 2024)

The remote Windows host is missing security update 5034819. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2024-21350, CVE-2024-21352, CVE-2024-21358, CVE-2024-21359, CVE-2024-21360, CVE-2024-21361,...