Microsoft Plugs a Record Breaking 147 Security Holes on Patch Tuesday
On Patch Tuesday in April, Microsoft fixed a total of 147 security vulnerabilities. These include three vulnerabilities that Microsoft classifies as critical.
PCWorld 8:09 pm on April 10, 2024
Microsoft has released security updates to address 94 vulnerabilities, including three critical ones in its products for Internet of Things (IoT) devices using Microsoft Defender for IoT. The most severe among these is an RCE (Remote Code Execution) vulnerability (CVE-2024-27121) in the Web Proxy Autodiscover Service component of Exchange Server. Additionally, there are two high severity RCE vulnerabilities in Excel for Microsoft 365 Apps and Office LTSC for Mac. The updates also include a spoofing vulnerability (CVE-2024-26190) in SharePoint Server and one in Outlook for Windows.
- Microsoft has released security updates to address 94 vulnerabilities.
- Three critical RCE vulnerabilities affect Microsoft Defender for IoT.
- The most severe RCE vulnerability (CVE-2024-27121) affects the Web Proxy Autodiscover Service component of Exchange Server.
- There are two high severity RCE vulnerabilities in Excel for Microsoft 365 Apps and Office LTSC for Mac.
- The updates also include a spoofing vulnerability (CVE-2024-26190) in SharePoint Server and one in Outlook for Windows.
https://www.pcworld.com/article/2300786/patch-day-microsoft-plugs-a-record-breaking-147-security-vulnerabilities.html