Microsoft has released multiple patches for vulnerabilities covering a range of their products. These monthly releases are called "Patch Tuesday” and hold security fixes for Microsoft devices and software. This month's release covers thirty-four Microsoft vulnerabilities. Two vulnerabilities are marked as critical and forty-six as important.

The CCB would like to point your attention to following vulnerabilities:

CVE-2024-20674 is a critical security feature bypass vulnerability affecting Windows Kerberos with a CVSSv3.1 score of 9. The authentication feature could be bypassed as this vulnerability allows impersonation. According to Microsoft “An authenticated attacker could exploit this vulnerability by establishing a machine-in-the-middle (MITM) attack or other local network spoofing technique, then sending a malicious Kerberos message to the client victim machine to spoof itself as the Kerberos authentication server.”

CVE-2024-21318 is an important remote-code execution vulnerability affecting Microsoft SharePoint Server with a CVSSv3.1 score of 8.8. This vulnerability allows an authenticated attacker on the network to run malicious code on the SharePoint server. According to Microsoft, the exploitation is more likely due to the low technical barrier to trigger the exploit.

CVE-2024-20683 and CVE-2024-20686 are important EoP vulnerabilities in Microsoft’s Win32k, a core kernel-side driver used in Windows. Both vulnerabilities received CVSSv3.1 scores of 7.8 and are rated “Exploitation More Likely.” Successful exploitation could allow an attacker to gain SYSTEM privileges on an affected host. EoP vulnerabilities are often abused by malicious actors after gaining initial access to a system.

CVE-2024-21310 is an important EoP vulnerability in the Microsoft Windows Cloud Files Mini Filter Driver. It was assigned a CVSSv3.1 score of 7.8 and is rated as “Exploitation More Likely.” An attacker could exploit this vulnerability as part of post-compromise activity to elevate privileges to SYSTEM.

CVE-2024-20653 is an important EoP vulnerability in the Microsoft Common Log File System (CLFS). It was assigned a CVSSv3 score of 7.8 and is rated as  “Exploitation More Likely.” An attacker could exploit this vulnerability as part of post-compromise activity to elevate privileges to SYSTEM.

CVE-2024-20698 is an important EoP vulnerability in the Microsoft Windows Kernel. It was assigned a CVSSv3 score of 7.8 and is rated as “Exploitation More Likely.” An attacker could exploit this vulnerability as part of post-compromise activity to elevate privileges to SYSTEM.

CVE-2024-20677 is an important Remote Code Execution Vulnerability in Microsoft Office. It was assigned a CVSSv3.1 score of 7.8. This vulnerability allows threat actors to create maliciously crafted Office documents with embedded FBX 3D model files to perform remote code execution.