Microsoft Fixes 149 Flaws in Huge April Patch Release, Zero-Days Included

[Caute_cautim]

Hi All

Microsoft has released security updates for the month of April 2024 to remediate a record 149 flaws, two of which have come under active exploitation in the wild.

Of the 149 flaws, three are rated Critical, 142 are rated Important, three are rated Moderate, and one is rated Low in severity. The update is aside from 21 vulnerabilities that the company addressed in its Chromium-based Edge browser following the release of the March 2024 Patch Tuesday fixes.

The two shortcomings that have come under active exploitation are below -

• CVE-2024-26234 (CVSS score: 6.7) - Proxy Driver Spoofing Vulnerability
• CVE-2024-29988 (CVSS score: 8.8) - SmartScreen Prompt Security Feature Bypass Vulnerability

https://thehackernews.com/2024/04/microsoft-fixes-149-flaws-in-huge-april.html

Regards

Caute_Cautim