Microsoft June 2024 Patch Tuesday fixes 51 flaws, 18 RCEs

Nowadays is Microsoft’s June 2024 Patch Tuesday, which contains safety updates for 51 flaws, eighteen faraway code execution flaws, and one publicly disclosed zero-day vulnerability.

This Patch Tuesday fastened 18 RCE flaws however just one crucial vulnerability, a faraway code execution vulnerability in Microsoft Message Queuing (MSMQ).

The choice of insects in every vulnerability class is indexed beneath:

• 25 Elevation of Privilege Vulnerabilities
• 18 Far flung Code Execution Vulnerabilities
• 3 Knowledge Disclosure Vulnerabilities
• 5 Denial of Carrier Vulnerabilities

The entire rely of 51 flaws does no longer come with 7 Microsoft Edge flaws fastened on June third.

To be told extra concerning the non-security updates launched as of late, you’ll evaluation our devoted articles at the new Home windows 11 KB5039212 replace and the Home windows 10 KB5039211 replace.

One publicly disclosed zero-day

This month’s Patch Tuesday fixes one publicly disclosed zero-day, and not using a actively exploited flaw fastened as of late.

Microsoft classifies a zero-day as a flaw publicly disclosed or actively exploited and not using a reputable repair to be had.

The publicly disclosed zero-day vulnerability is the up to now disclosed ‘Keytrap’ assault within the DNS protocol that Microsoft has now fastened as a part of as of late’s updates.

CVE-2023-50868 – MITRE: CVE-2023-50868 NSEC3 closest encloser evidence can exhaust CPU

“CVE-2023-50868 is relating to a vulnerability in DNSSEC validation the place an attacker may just exploit same old DNSSEC protocols supposed for DNS integrity through the use of over the top sources on a resolver, inflicting a denial of carrier for official customers. MITRE created this CVE on their behalf,” reads the Microsoft advisory.

This flaw used to be up to now disclosed in February and patched in a lot of DNS implementations, together with BIND, PowerDNS, Unbound, Knot Resolver, and Dnsmasq.

Different fascinating vulnerabilities fastened this month come with more than one Microsoft Place of work faraway code execution flaws, together with Microsoft Outlook RCEs that may be exploited from the preview pane.

Microsoft additionally fastened seven Home windows Kernel privilege elevation flaws that might permit a neighborhood attacker to achieve SYSTEM privileges.

Contemporary updates from different corporations

Different distributors who launched updates or advisories in June 2024 come with:

Sadly, we will be able to now not be linking to SAP’s Patch Tuesday safety updates as they’ve positioned them in the back of a buyer login.

The June 2024 Patch Tuesday Safety Updates

Underneath is your entire listing of resolved vulnerabilities within the June 2024 Patch Tuesday updates.

To get entry to the entire description of every vulnerability and the techniques it impacts, you’ll view the complete record right here.