A naukri.com initiative
Hackingblogs
2M
169
Image Credit: Hackingblogs
Microsoft’s Patch Tuesday Patched 63 Vulnerabilities Out Of Which 3 Are Actively Exploited: CIA Releases Advisory
- Microsoft released its latest Patch Tuesday, addressing 63 vulnerabilities across its software products, with 3 actively exploited in the wild.
- Two zero-day vulnerabilities were fixed by Microsoft, with updates available for the actively exploited ones.
- Federal agencies have until March 4th to implement mitigations for these vulnerabilities.
- Of the 63 vulnerabilities, 3 were classified as Critical, 57 as Important, 1 as Moderate, and 2 as Low in severity.
- One of the critical vulnerabilities was in the Windows Ancillary Function Driver for WinSock, allowing attackers to gain SYSTEM privileges.
- Another critical vulnerability was in the Windows Lightweight Directory Access Protocol (LDAP) for remote code execution.
- The CISA advisory emphasizes the urgency of addressing these vulnerabilities to protect against cyber threats.
- A remote code execution vulnerability in Microsoft High Performance Compute (HPC) Pack was identified as the most severe in the update.
- Federal agencies are urged to remediate known exploited vulnerabilities promptly, as highlighted by CISA's Binding Operational Directive.
- The severity ratings, exploit statuses, and types of various vulnerabilities patched by Microsoft were detailed in the update.
Read Full Article
10 Likes
For uninterrupted reading, download the app