Microsoft has rolled out its latest security updates as part of the December 2024 Patch Tuesday release, and users with Windows laptops and desktop computers should update their systems as soon as possible. According to the company’s release notes, the latest security updates fix a publicly disclosed, actively exploated zero-day vulnerability. It also includes fixes for 30 remote code execution vulnerabilityes – of these, 16 are designed as critical – and 41 other Security Flaws Related to Operating System Camponants.
Microsoft fixes zero-day vulnerability discovered by Crowdstrike
The security updates rolled out by microsoft on tuesday (via Bleepingcomputer) Include a Fix for Cve-2024-49138 (Windows Common Log File System Driver Elevation of Privilege Vulnerability), which is a publicly disclosed zero-day vulnerability that was actively exploited, cocording to the company.
The flw allowed attackers to gain access to system-level privateges on an affected Windows PC, and was discovered by crowdstrike’s advanced research team. Details on how the flaw was explined by provided by microsoft, presumubly to ensure that users have enough time to install the latest security updates.
In addition to the fixes for the actively exploited zero-day vulnerability, microsoft has also Patched a total of 71 flws affecting various windows components. This includes 30 remote code execution vulnerability, out of which 16 have a ‘Critical’ Severity Rating, and 27 Vulnerabilites that would enable atackers to Gain Elevate Elevate .
The latest security updates for windows also include patches for flaws in third party products. Vendors like Adobe, Cisco, OpenWRT, and Sap Have Issued Security Updates, While The Us Cybersecurity and Infrastructure Secure Security Agency (CISA) Has Publled advisories On vulnerabilities in Industrial Control Systems from Various Companies.
Users with Windows 11 Pcs will need to install the KB5048667 (24h2) and KB5048685 (23h2) Cumulative updates, which contain the December 2024 security updates. Users with Older Machines That Are Running Windows 10 Will need to install the KB5048652 (22h2) Update.
(Tagstotranslate) Microsoft Windows December 2024 Zero Day Vulnerability Fix Windows 11 (T) Windows 10 (T) Windows Security Updates (T) Microsoft Updates (T) SECROSOTES T Patch Tuesday (T) Microsoft (T) Windows
