A series of high-profile security incidents have rocked Microsoft over the past few years, and a scathing report from the Cyber Safety Review Board recently concluded that “Microsoft's security culture was inadequate and requires an overhaul.” Inside Microsoft, there is concern that the attacks could seriously ...

Other Microsoft Vulnerability Highlights CVE-2024-29996 and CVE-2024-30025 are elevation of privilege vulnerabilities in the Windows Common Log File System Driver. On successful exploitation, an attacker could gain SYSTEM privileges. CVE-2024-30050 is a security feature bypass vulnerability in Windows Mark of the Web.

Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows Zero-Days. Microsoft has released patches to address 73 security flaws spanning its software lineup as part of its Patch Tuesday updates for February 2024, including two zero-days that have come under active exploitation.

A zero-day vulnerability is a flaw in software for which no official patch or security update has been released. A software vendor may or may not be aware of the vulnerability, and no public information about this risk is available. Zero-day vulnerabilities often have high severity levels and are actively exploited.