ADVISORY!
TLP : CLEAR
Date : 14/08/2024
REF NO : CERT / 2024/08/73
Multiple Vulnerabilities in Microsoft Products
Severity Level: High
Components Affected
- Microsoft Windows
- Microsoft office
- Developer Tools
- Azure
- Extended Security Updates (ESU)
- Mariner
- Microsoft Dynamics
- Apps
Overview
Multiple vulnerabilities have been reported in Microsoft Products which could allow an attacker to gain elevated privileges, obtain Information Disclosure, Bypass Security restriction, conduct remote code execution attacks, perform spoofing attacks, or cause denial of service conditions.
Description
Multiple vulnerabilities have been reported in various Microsoft products:
Impact
- Elevation of Privilege
- Information Disclosure
- Remote Code Execution
- Denial of Service
- Security Feature Bypass
- Tampering
- Spoofing
Solution/ Workarounds
Apply appropriate security updates as mentioned in:
https://msrc.microsoft.com/update-guide/releaseNote/2024-Aug
Reference
Disclaimer : The information provided herein is on an “as is” basis, without warranty of any kind.
Sri Lanka Computer Emergency Readiness Team | Coordination Centre
- Hotline : 101
- +94 11 269 1692
- Room 4-112, BMICH, Bauddhaloka Mawatha, Colombo 07, Sri Lanka.
- General inquiry: cert@cert.gov.lk
- Security incidents: incidents@cert.gov.lk
- Social media incidents: report@cert.gov.lk
