Microsoft’s June Patch Tuesday Fixes Critical RCE Flaws

The June 2024 Patch Tuesday update from Microsoft addresses nearly 49 vulnerabilities in its products, including a critical vulnerability in Microsoft Message Queuing (MSMQ) tracked as CVE-2024-30080, with a CVSS score of 9.8. This vulnerability allows remote code execution if an attacker sends a specially crafted MSMQ packet to an MSMQ server. All Windows versions, from Windows Server 2008 to Windows 10, are affected.

The update also resolves significant remote code execution vulnerabilities, such as CVE-2024-30103 in Microsoft Outlook and CVE-2024-30078 in the Windows Wi-Fi Driver. Additionally, it addresses multiple privilege escalation vulnerabilities, including CVE-2024-30089 in Microsoft Streaming Service and CVE-2024-30085 in the Windows Cloud Files Mini Filter Driver.

A publicly known, yet not exploited, vulnerability in Windows Server related to DNSSEC validation, identified as CVE-2023-50868, is also patched. This vulnerability could allow an attacker to consume excessive resources on a resolver, denying service to legitimate users.

Microsoft urges all users to update their products to the latest versions to prevent exploitation of these vulnerabilities.

Source: Cyber Security News

To mitigate potential threats, it is important to implement additional cybersecurity measures with the help of a trusted partner like INFRA www.infrascan.net, or you can try yourself using check.website.