Microsoft Windows 11 and Windows 10 Updated With Fix for Actively Exploited Zero-Day Vulnerability

[Pelican Press 0]

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

Windows 11 and Windows 10 Updated With Fix for Actively Exploited Zero-Day Vulnerability

This is the hidden content, please

• Sign In
• or
• Sign Up

has rolled out its latest security updates as part of the December 2024 Patch Tuesday release, and users with Windows laptops and desktop computers should update their systems as soon as possible. According to the company’s release notes, the latest security updates fix a publicly disclosed, actively exploited zero-day vulnerability. It also includes fixes for 30 remote code execution vulnerabilities — of these, 16 are designated as critical — and 41 other security flaws related to operating system components.

This is the hidden content, please

• Sign In
• or
• Sign Up

Fixes Zero-Day Vulnerability Discovered by Crowdstrike

The security updates rolled out by

This is the hidden content, please

• Sign In
• or
• Sign Up

on Tuesday (

This is the hidden content, please

• Sign In
• or
• Sign Up

BleepingComputer) include a fix for

This is the hidden content, please

• Sign In
• or
• Sign Up

(Windows Common Log File System Driver Elevation of Privilege Vulnerability), which is a publicly disclosed zero-day vulnerability that was actively exploited, according to the company.

The flaw allowed attackers to gain access to system-level privileges on an affected Windows PC, and was discovered by Crowdstrike’s Advanced Research Team. Details on how the flaw was exploited were not provided by

This is the hidden content, please

• Sign In
• or
• Sign Up

, presumably to ensure that users have enough time to install the latest security updates.

In addition to the fixes for the actively exploited zero-day vulnerability,

This is the hidden content, please

• Sign In
• or
• Sign Up

has also patched a total of 71 flaws affecting various Windows components. This includes 30 remote code execution vulnerabilities, out of which 16 have a ‘Critical’ severity rating, and 27 vulnerabilities that would enable attackers to gain elevated privileges on an unpatched Windows PC.

The latest security updates for Windows also include patches for flaws in third party products. Vendors like

This is the hidden content, please

• Sign In
• or
• Sign Up

, Cisco, OpenWrt, and SAP have issued security updates, while the US Cybersecurity and Infrastructure Security Agency (CISA) has published

This is the hidden content, please

• Sign In
• or
• Sign Up

on vulnerabilities in industrial control systems from various companies.

Users with Windows 11 PCs will need to install the

This is the hidden content, please

• Sign In
• or
• Sign Up

(24H2) and

This is the hidden content, please

• Sign In
• or
• Sign Up

(23H2) cumulative updates, which contain the December 2024 security updates. Users with older machines that are running Windows 10 will need to install the

This is the hidden content, please

• Sign In
• or
• Sign Up

(22H2) update.

This is the hidden content, please

• Sign In
• or
• Sign Up

#

This is the hidden content, please

• Sign In
• or
• Sign Up

#Windows #Windows #Updated #Fix #Actively #Exploited #ZeroDay #Vulnerability

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up