Fortra VM will include the Microsoft Patch Tuesday checks in the NIRV 4.40.0 and FVM Agent 2.6 releases.

• Microsoft addressed 150 vulnerabilities in this release, including 3 rated as Critical and 67 Remote Code Execution vulnerabilities.
• This release also includes a fix for the Proxy Driver Spoofing Vulnerability (CVE-2024-26234) that has been exploited in the wild.

CVE/Advisory	Title	Tag	Microsoft Severity Rating	Base Score	Microsoft Impact	Exploited	Publicly Disclosed
CVE-2024-20669	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	6.7	Security Feature Bypass	No	No
CVE-2024-20688	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	7.1	Security Feature Bypass	No	No
CVE-2024-20689	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	7.1	Security Feature Bypass	No	No
CVE-2024-21409	.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability	.NET and Visual Studio	Important	7.3	Remote Code Execution	No	No
CVE-2024-21424	Azure Compute Gallery Elevation of Privilege Vulnerability	Azure Compute Gallery	Important	6.5	Elevation of Privilege	No	No
CVE-2024-26250	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	6.7	Security Feature Bypass	No	No
CVE-2024-26252	Windows rndismp6.sys Remote Code Execution Vulnerability	Windows Internet Connection Sharing (ICS)	Important	6.8	Remote Code Execution	No	No
CVE-2024-26253	Windows rndismp6.sys Remote Code Execution Vulnerability	Windows Internet Connection Sharing (ICS)	Important	6.8	Remote Code Execution	No	No
CVE-2024-26254	Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability	Windows Virtual Machine Bus	Important	7.5	Denial of Service	No	No
CVE-2024-26255	Windows Remote Access Connection Manager Information Disclosure Vulnerability	Windows Remote Access Connection Manager	Important	5.5	Information Disclosure	No	No
CVE-2024-26256	libarchive Remote Code Execution Vulnerability	Windows Compressed Folder	Important	7.8	Remote Code Execution	No	No
CVE-2024-26172	Windows DWM Core Library Information Disclosure  Vulnerability	Windows DWM Core Library	Important	5.5	Information Disclosure	No	No
CVE-2024-26179	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Windows Routing and Remote Access Service (RRAS)	Important	8.8	Remote Code Execution	No	No
CVE-2024-26200	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Windows Routing and Remote Access Service (RRAS)	Important	8.8	Remote Code Execution	No	No
CVE-2024-26205	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	Windows Routing and Remote Access Service (RRAS)	Important	8.8	Remote Code Execution	No	No
CVE-2024-26158	Microsoft Install Service Elevation of Privilege Vulnerability	Microsoft Install Service	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26232	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	Windows Message Queuing	Important	7.3	Remote Code Execution	No	No
CVE-2024-28920	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	7.8	Security Feature Bypass	No	No
CVE-2024-28922	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	4.1	Security Feature Bypass	No	No
CVE-2024-28921	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	6.7	Security Feature Bypass	No	No
CVE-2024-28919	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	6.7	Security Feature Bypass	No	No
CVE-2024-28923	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	6.4	Security Feature Bypass	No	No
CVE-2024-28896	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	7.5	Security Feature Bypass	No	No
CVE-2024-28898	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	6.3	Security Feature Bypass	No	No
CVE-2024-28901	Windows Remote Access Connection Manager Information Disclosure Vulnerability	Windows Remote Access Connection Manager	Important	5.5	Information Disclosure	No	No
CVE-2024-28902	Windows Remote Access Connection Manager Information Disclosure Vulnerability	Windows Remote Access Connection Manager	Important	5.5	Information Disclosure	No	No
CVE-2024-28903	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	6.7	Security Feature Bypass	No	No
CVE-2024-28905	Microsoft Brokering File System Elevation of Privilege Vulnerability	Microsoft Brokering File System	Important	7.8	Elevation of Privilege	No	No
CVE-2024-28906	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28908	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28909	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28910	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28911	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28912	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28913	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28914	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28915	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28929	Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28931	Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28932	Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28936	Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28939	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28942	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28945	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-29043	Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-29045	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	7.5	Remote Code Execution	No	No
CVE-2024-29047	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-29050	Windows Cryptographic Services Remote Code Execution Vulnerability	Windows Cryptographic Services	Important	8.4	Remote Code Execution	No	No
CVE-2024-29063	Azure AI Search Information Disclosure Vulnerability	Azure AI Search	Important	7.3	Information Disclosure	No	No
CVE-2024-29064	Windows Hyper-V Denial of Service Vulnerability	Role: Windows Hyper-V	Important	6.2	Denial of Service	No	No
CVE-2024-29066	Windows Distributed File System (DFS) Remote Code Execution Vulnerability	Windows Distributed File System (DFS)	Important	7.2	Remote Code Execution	No	No
CVE-2024-20685	Azure Private 5G Core Denial of Service Vulnerability	Azure Private 5G Core	Moderate	5.9	Denial of Service	No	No
CVE-2024-23594	Lenovo: CVE-2024-23594 Stack Buffer Overflow in LenovoBT.efi	Windows Secure Boot	Important	6.4	Security Feature Bypass	No	No
CVE-2024-29988	SmartScreen Prompt Security Feature Bypass Vulnerability	Internet Shortcut Files	Important	8.8	Security Feature Bypass	No	No
CVE-2024-29990	Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability	Microsoft Azure Kubernetes Service	Important	9	Elevation of Privilege	No	No
CVE-2024-2201	Intel: CVE-2024-2201 Branch History Injection	Intel	Important	4.7	Information Disclosure	No	No
CVE-2024-20678	Remote Procedure Call Runtime Remote Code Execution Vulnerability	Windows Remote Procedure Call	Important	8.8	Remote Code Execution	No	No
CVE-2024-20665	BitLocker Security Feature Bypass Vulnerability	Windows BitLocker	Important	6.1	Security Feature Bypass	No	No
CVE-2024-20693	Windows Kernel Elevation of Privilege Vulnerability	Windows Kernel	Important	7.8	Elevation of Privilege	No	No
CVE-2024-21322	Microsoft Defender for IoT Remote Code Execution Vulnerability	Microsoft Defender for IoT	Critical	7.2	Remote Code Execution	No	No
CVE-2024-21323	Microsoft Defender for IoT Remote Code Execution Vulnerability	Microsoft Defender for IoT	Critical	8.8	Remote Code Execution	No	No
CVE-2024-21324	Microsoft Defender for IoT Elevation of Privilege Vulnerability	Microsoft Defender for IoT	Important	7.2	Elevation of Privilege	No	No
CVE-2024-21447	Windows Authentication Elevation of Privilege Vulnerability	Windows Authentication Methods	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26193	Azure Migrate Remote Code Execution Vulnerability	Azure Migrate	Important	6.4	Remote Code Execution	No	No
CVE-2024-26168	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	6.8	Security Feature Bypass	No	No
CVE-2024-26171	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	6.7	Security Feature Bypass	No	No
CVE-2024-26175	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	7.8	Security Feature Bypass	No	No
CVE-2024-26180	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	8	Security Feature Bypass	No	No
CVE-2024-26183	Windows Kerberos Denial of Service Vulnerability	Windows Kerberos	Important	6.5	Denial of Service	No	No
CVE-2024-26189	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	8	Security Feature Bypass	No	No
CVE-2024-26194	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	7.4	Security Feature Bypass	No	No
CVE-2024-26195	DHCP Server Service Remote Code Execution Vulnerability	Windows DHCP Server	Important	7.2	Remote Code Execution	No	No
CVE-2024-26202	DHCP Server Service Remote Code Execution Vulnerability	Windows DHCP Server	Important	7.2	Remote Code Execution	No	No
CVE-2024-26209	Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability	Windows Local Security Authority Subsystem Service (LSASS)	Important	5.5	Information Disclosure	No	No
CVE-2024-26218	Windows Kernel Elevation of Privilege Vulnerability	Windows Kernel	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26219	HTTP.sys Denial of Service Vulnerability	Windows HTTP.sys	Important	7.5	Denial of Service	No	No
CVE-2024-26220	Windows Mobile Hotspot Information Disclosure Vulnerability	Windows Mobile Hotspot	Important	5	Information Disclosure	No	No
CVE-2024-26221	Windows DNS Server Remote Code Execution Vulnerability	Role: DNS Server	Important	7.2	Remote Code Execution	No	No
CVE-2024-26222	Windows DNS Server Remote Code Execution Vulnerability	Role: DNS Server	Important	7.2	Remote Code Execution	No	No
CVE-2024-26223	Windows DNS Server Remote Code Execution Vulnerability	Role: DNS Server	Important	7.2	Remote Code Execution	No	No
CVE-2024-26224	Windows DNS Server Remote Code Execution Vulnerability	Role: DNS Server	Important	7.2	Remote Code Execution	No	No
CVE-2024-26227	Windows DNS Server Remote Code Execution Vulnerability	Role: DNS Server	Important	7.2	Remote Code Execution	No	No
CVE-2024-26231	Windows DNS Server Remote Code Execution Vulnerability	Role: DNS Server	Important	7.2	Remote Code Execution	No	No
CVE-2024-26233	Windows DNS Server Remote Code Execution Vulnerability	Role: DNS Server	Important	7.2	Remote Code Execution	No	No
CVE-2024-26241	Win32k Elevation of Privilege Vulnerability	Windows Win32K – ICOMP	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26243	Windows USB Print Driver Elevation of Privilege Vulnerability	Windows USB Print Driver	Important	7	Elevation of Privilege	No	No
CVE-2024-26248	Windows Kerberos Elevation of Privilege Vulnerability	Windows Kerberos	Important	7.5	Elevation of Privilege	No	No
CVE-2024-26210	Microsoft WDAC OLE DB Provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-26229	Windows CSC Service Elevation of Privilege Vulnerability	Windows Kernel	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26234	Proxy Driver Spoofing Vulnerability	Windows Proxy Driver	Important	6.7	Spoofing	Yes	Yes
CVE-2024-26235	Windows Update Stack Elevation of Privilege Vulnerability	Windows Update Stack	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26236	Windows Update Stack Elevation of Privilege Vulnerability	Windows Update Stack	Important	7	Elevation of Privilege	No	No
CVE-2024-26237	Windows Defender Credential Guard Elevation of Privilege Vulnerability	Windows Defender Credential Guard	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26242	Windows Telephony Server Elevation of Privilege Vulnerability	Windows Telephony Server	Important	7	Elevation of Privilege	No	No
CVE-2024-26244	Microsoft WDAC OLE DB Provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-26245	Windows SMB Elevation of Privilege Vulnerability	Windows Kernel	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26207	Windows Remote Access Connection Manager Information Disclosure Vulnerability	Windows Remote Access Connection Manager	Important	5.5	Information Disclosure	No	No
CVE-2024-26208	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	Windows Message Queuing	Important	7.2	Remote Code Execution	No	No
CVE-2024-26211	Windows Remote Access Connection Manager Elevation of Privilege Vulnerability	Windows Remote Access Connection Manager	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26212	DHCP Server Service Denial of Service Vulnerability	Windows DHCP Server	Important	7.5	Denial of Service	No	No
CVE-2024-26213	Microsoft Brokering File System Elevation of Privilege Vulnerability	Microsoft Brokering File System	Important	7	Elevation of Privilege	No	No
CVE-2024-26214	Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability	Microsoft WDAC ODBC Driver	Important	8.8	Remote Code Execution	No	No
CVE-2024-26215	DHCP Server Service Denial of Service Vulnerability	Windows DHCP Server	Important	7.5	Denial of Service	No	No
CVE-2024-26216	Windows File Server Resource Management Service Elevation of Privilege Vulnerability	Windows File Server Resource Management Service	Important	7.3	Elevation of Privilege	No	No
CVE-2024-26217	Windows Remote Access Connection Manager Information Disclosure Vulnerability	Windows Remote Access Connection Manager	Important	5.5	Information Disclosure	No	No
CVE-2024-26226	Windows Distributed File System (DFS) Information Disclosure Vulnerability	Windows Distributed File System (DFS)	Important	6.5	Information Disclosure	No	No
CVE-2024-26228	Windows Cryptographic Services Security Feature Bypass Vulnerability	Windows Cryptographic Services	Important	7.8	Security Feature Bypass	No	No
CVE-2024-26230	Windows Telephony Server Elevation of Privilege Vulnerability	Windows Remote Access Connection Manager	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26239	Windows Telephony Server Elevation of Privilege Vulnerability	Windows Remote Access Connection Manager	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26240	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	8	Security Feature Bypass	No	No
CVE-2024-26251	Microsoft SharePoint Server Spoofing Vulnerability	Microsoft Office SharePoint	Important	6.8	Spoofing	No	No
CVE-2024-26257	Microsoft Excel Remote Code Execution Vulnerability	Microsoft Office Excel	Important	7.8	Remote Code Execution	No	No
CVE-2024-28924	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	6.7	Security Feature Bypass	No	No
CVE-2024-28925	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	8	Security Feature Bypass	No	No
CVE-2024-28897	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	6.8	Security Feature Bypass	No	No
CVE-2024-28900	Windows Remote Access Connection Manager Information Disclosure Vulnerability	Windows Remote Access Connection Manager	Important	5.5	Information Disclosure	No	No
CVE-2024-28904	Microsoft Brokering File System Elevation of Privilege Vulnerability	Microsoft Brokering File System	Important	7.8	Elevation of Privilege	No	No
CVE-2024-28907	Microsoft Brokering File System Elevation of Privilege Vulnerability	Microsoft Brokering File System	Important	7.8	Elevation of Privilege	No	No
CVE-2024-28917	Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability	Azure Arc	Important	6.2	Elevation of Privilege	No	No
CVE-2024-28926	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28927	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28930	Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28933	Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28934	Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28935	Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28937	Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28938	Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28940	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28941	Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28943	Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-28944	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-29044	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-29046	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-29048	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-29052	Windows Storage Elevation of Privilege Vulnerability	Windows Storage	Important	7.8	Elevation of Privilege	No	No
CVE-2024-29053	Microsoft Defender for IoT Remote Code Execution Vulnerability	Microsoft Defender for IoT	Critical	8.8	Remote Code Execution	No	No
CVE-2024-29055	Microsoft Defender for IoT Elevation of Privilege Vulnerability	Microsoft Defender for IoT	Important	7.2	Elevation of Privilege	No	No
CVE-2024-29054	Microsoft Defender for IoT Elevation of Privilege Vulnerability	Microsoft Defender for IoT	Important	7.2	Elevation of Privilege	No	No
CVE-2024-29056	Windows Authentication Elevation of Privilege Vulnerability	Windows Authentication Methods	Important	4.3	Elevation of Privilege	No	No
CVE-2024-29061	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	7.8	Security Feature Bypass	No	No
CVE-2024-29062	Secure Boot Security Feature Bypass Vulnerability	Windows Secure Boot	Important	7.1	Security Feature Bypass	No	No
CVE-2024-20670	Outlook for Windows Spoofing Vulnerability	Microsoft Office Outlook	Important	8.1	Spoofing	No	No
CVE-2024-29982	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-29983	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-29984	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-29985	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability	SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-23593	Lenovo: CVE-2024-23593 Zero Out Boot Manager and drop to UEFI Shell	Windows Secure Boot	Important	7.8	Security Feature Bypass	No	No
CVE-2024-29989	Azure Monitor Agent Elevation of Privilege Vulnerability	Azure Monitor	Important	8.4	Elevation of Privilege	No	No
CVE-2024-29992	Azure Identity Library for .NET Information Disclosure Vulnerability	Azure SDK	Moderate	5.5	Information Disclosure	No	No
CVE-2024-29993	Azure CycleCloud Elevation of Privilege Vulnerability	Azure	Important	8.8	Elevation of Privilege	No	No

Fortra VM will include the Microsoft Patch Tuesday checks in the NIRV 4.38.0 and FVM Agent 2.5 releases.

• Microsoft addressed 60 vulnerabilities in this release, including 2 rated as Critical and 18 Remote Code Execution vulnerabilities.

CVE/Advisory	Title	Tag	Microsoft Severity Rating	Base Score	Microsoft Impact	Exploited	Publicly Disclosed
CVE-2024-20671	Microsoft Defender Security Feature Bypass Vulnerability	Windows Defender	Important	5.5	Security Feature Bypass	No	No
CVE-2024-21392	.NET and Visual Studio Denial of Service Vulnerability	.NET	Important	7.5	Denial of Service	No	No
CVE-2024-21411	Skype for Consumer Remote Code Execution Vulnerability	Skype for Consumer	Important	8.8	Remote Code Execution	No	No
CVE-2024-21418	Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability	Software for Open Networking in the Cloud (SONiC)	Important	7.8	Elevation of Privilege	No	No
CVE-2024-21421	Azure SDK Spoofing Vulnerability	Azure SDK	Important	7.5	Spoofing	No	No
CVE-2024-21426	Microsoft SharePoint Server Remote Code Execution Vulnerability	Microsoft Office SharePoint	Important	7.8	Remote Code Execution	No	No
CVE-2024-21429	Windows USB Hub Driver Remote Code Execution Vulnerability	Windows USB Hub Driver	Important	6.8	Remote Code Execution	No	No
CVE-2024-21430	Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability	Windows USB Serial Driver	Important	5.7	Remote Code Execution	No	No
CVE-2024-21438	Microsoft AllJoyn API Denial of Service Vulnerability	Windows AllJoyn API	Important	7.5	Denial of Service	No	No
CVE-2024-21439	Windows Telephony Server Elevation of Privilege Vulnerability	Windows Telephony Server	Important	7	Elevation of Privilege	No	No
CVE-2024-21441	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-21442	Windows USB Print Driver Elevation of Privilege Vulnerability	Windows USB Print Driver	Important	7.8	Elevation of Privilege	No	No
CVE-2024-21443	Windows Kernel Elevation of Privilege Vulnerability	Windows Kernel	Important	7.3	Elevation of Privilege	No	No
CVE-2024-21444	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-21445	Windows USB Print Driver Elevation of Privilege Vulnerability	Windows USB Print Driver	Important	7	Elevation of Privilege	No	No
CVE-2024-21446	NTFS Elevation of Privilege Vulnerability	Windows NTFS	Important	7.8	Elevation of Privilege	No	No
CVE-2024-21450	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-21451	Microsoft ODBC Driver Remote Code Execution Vulnerability	Microsoft WDAC ODBC Driver	Important	8.8	Remote Code Execution	No	No
CVE-2024-26197	Windows Standards-Based Storage Management Service Denial of Service Vulnerability	Windows Standards-Based Storage Management Service	Important	6.5	Denial of Service	No	No
CVE-2024-26159	Microsoft ODBC Driver Remote Code Execution Vulnerability	Windows ODBC Driver	Important	8.8	Remote Code Execution	No	No
CVE-2024-26190	Microsoft QUIC Denial of Service Vulnerability	Microsoft QUIC	Important	7.5	Denial of Service	No	No
CVE-2024-26198	Microsoft Exchange Server Remote Code Execution Vulnerability	Microsoft Exchange Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-26199	Microsoft Office Elevation of Privilege Vulnerability	Microsoft Office	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26201	Microsoft Intune Linux Agent Elevation of Privilege Vulnerability	Microsoft Intune	Important	6.6	Elevation of Privilege	No	No
CVE-2024-26203	Azure Data Studio Elevation of Privilege Vulnerability	Azure Data Studio	Important	7.3	Elevation of Privilege	No	No
CVE-2024-26161	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-26164	Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability	Microsoft Django Backend for SQL Server	Important	8.8	Remote Code Execution	No	No
CVE-2024-21330	Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability	Open Management Infrastructure	Important	7.8	Elevation of Privilege	No	No
CVE-2024-21334	Open Management Infrastructure (OMI) Remote Code Execution Vulnerability	Open Management Infrastructure	Important	9.8	Remote Code Execution	No	No
CVE-2024-21390	Microsoft Authenticator Elevation of Privilege Vulnerability	Microsoft Authenticator	Important	7.1	Elevation of Privilege	No	No
CVE-2024-21400	Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability	Microsoft Azure Kubernetes Service	Important	9	Elevation of Privilege	No	No
CVE-2024-21407	Windows Hyper-V Remote Code Execution Vulnerability	Role: Windows Hyper-V	Critical	8.1	Remote Code Execution	No	No
CVE-2024-21408	Windows Hyper-V Denial of Service Vulnerability	Role: Windows Hyper-V	Critical	5.5	Denial of Service	No	No
CVE-2024-21419	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability	Microsoft Dynamics	Important	7.6	Spoofing	No	No
CVE-2024-21427	Windows Kerberos Security Feature Bypass Vulnerability	Windows Kerberos	Important	7.5	Security Feature Bypass	No	No
CVE-2024-21431	Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability	Windows Hypervisor-Protected Code Integrity	Important	7.8	Security Feature Bypass	No	No
CVE-2024-21432	Windows Update Stack Elevation of Privilege Vulnerability	Windows Update Stack	Important	7	Elevation of Privilege	No	No
CVE-2024-21433	Windows Print Spooler Elevation of Privilege Vulnerability	Windows Print Spooler Components	Important	7	Elevation of Privilege	No	No
CVE-2024-21434	Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability	Microsoft Windows SCSI Class System File	Important	7.8	Elevation of Privilege	No	No
CVE-2024-21435	Windows OLE Remote Code Execution Vulnerability	Windows OLE	Important	8.8	Remote Code Execution	No	No
CVE-2024-21436	Windows Installer Elevation of Privilege Vulnerability	Windows Installer	Important	7.8	Elevation of Privilege	No	No
CVE-2024-21437	Windows Graphics Component Elevation of Privilege Vulnerability	Microsoft Graphics Component	Important	7.8	Elevation of Privilege	No	No
CVE-2024-21440	Microsoft ODBC Driver Remote Code Execution Vulnerability	Windows ODBC Driver	Important	8.8	Remote Code Execution	No	No
CVE-2024-21448	Microsoft Teams for Android Information Disclosure Vulnerability	Microsoft Teams for Android	Important	5	Information Disclosure	No	No
CVE-2024-26160	Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability	Windows Cloud Files Mini Filter Driver	Important	5.5	Information Disclosure	No	No
CVE-2024-26162	Microsoft ODBC Driver Remote Code Execution Vulnerability	Windows ODBC Driver	Important	8.8	Remote Code Execution	No	No
CVE-2024-26166	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-26169	Windows Error Reporting Service Elevation of Privilege Vulnerability	Windows Error Reporting	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26170	Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability	Windows Composite Image File System	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26173	Windows Kernel Elevation of Privilege Vulnerability	Windows Kernel	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26174	Windows Kernel Information Disclosure Vulnerability	Windows Kernel	Important	5.5	Information Disclosure	No	No
CVE-2024-26176	Windows Kernel Elevation of Privilege Vulnerability	Windows Kernel	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26177	Windows Kernel Information Disclosure Vulnerability	Windows Kernel	Important	5.5	Information Disclosure	No	No
CVE-2024-26178	Windows Kernel Elevation of Privilege Vulnerability	Windows Kernel	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26181	Windows Kernel Denial of Service Vulnerability	Windows Kernel	Important	5.5	Denial of Service	No	No
CVE-2024-26182	Windows Kernel Elevation of Privilege Vulnerability	Windows Kernel	Important	7.8	Elevation of Privilege	No	No
CVE-2024-26185	Windows Compressed Folder Tampering Vulnerability	Windows Compressed Folder	Important	6.5	Tampering	No	No
CVE-2023-28746	Intel: CVE-2023-28746 Register File Data Sampling (RFDS)	Intel	Important	N/A	Information Disclosure	No	No
CVE-2024-26204	Outlook for Android Information Disclosure Vulnerability	Outlook for Android	Important	7.5	Information Disclosure	No	No
CVE-2024-26165	Visual Studio Code Elevation of Privilege Vulnerability	Visual Studio Code	Important	8.8	Elevation of Privilege	No	No

Frontline.Cloud will include the Microsoft Patch Tuesday checks in the NIRV 4.36.0 and Frontline Agent 2.4 releases.

• Microsoft addressed 73 vulnerabilities in this release, including 5 rated as Critical and 30 Remote Code Execution vulnerabilities.
• This release also includes fixes for CVE-2024-21351 and CVE-2024-21412 that have been exploited in the wild.
  • Internet Shortcut Files Security Feature Bypass Vulnerability (CVE-2024-21412)
    • This vulnerability requires an attacker to trick a user into executing a malicious file.
  • Windows SmartScreen Security Feature Bypass Vulnerability (CVE-2024-21351)
    • According to Microsoft, this vulnerability could allow an attacker to inject code into Windows SmartScreen to possibly achieve code execution after tricking a user into executing a malicious file.

CVE/Advisory	Title	Tag	Microsoft Severity Rating	Base Score	Microsoft Impact	Exploited	Publicly Disclosed
CVE-2024-20667	Azure DevOps Server Remote Code Execution Vulnerability	Azure DevOps	Important	7.5	Remote Code Execution	No	No
CVE-2023-50387	MITRE: CVE-2023-50387 DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers	Role: DNS Server	Important	N/A	Denial of Service	No	No
CVE-2024-21327	Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability	Microsoft Dynamics	Important	7.6	Spoofing	No	No
CVE-2024-21329	Azure Connected Machine Agent Elevation of Privilege Vulnerability	Azure Connected Machine Agent	Important	7.3	Elevation of Privilege	No	No
CVE-2024-21338	Windows Kernel Elevation of Privilege Vulnerability	Windows Kernel	Important	7.8	Elevation of Privilege	No	No
CVE-2024-21340	Windows Kernel Information Disclosure Vulnerability	Windows Kernel	Important	4.6	Information Disclosure	No	No
CVE-2024-21349	Microsoft ActiveX Data Objects Remote Code Execution Vulnerability	Microsoft ActiveX	Important	8.8	Remote Code Execution	No	No
CVE-2024-21350	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-21351	Windows SmartScreen Security Feature Bypass Vulnerability	Windows SmartScreen	Moderate	7.6	Security Feature Bypass	Yes	No
CVE-2024-21352	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-21354	Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability	Windows Message Queuing	Important	7.8	Elevation of Privilege	No	No
CVE-2024-21357	Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability	Windows Internet Connection Sharing (ICS)	Critical	7.5	Remote Code Execution	No	No
CVE-2024-21358	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-21360	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-21361	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-21366	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-21369	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-21371	Windows Kernel Elevation of Privilege Vulnerability	Windows Kernel	Important	7	Elevation of Privilege	No	No
CVE-2024-21372	Windows OLE Remote Code Execution Vulnerability	Windows OLE	Important	8.8	Remote Code Execution	No	No
CVE-2024-21375	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-21379	Microsoft Word Remote Code Execution Vulnerability	Microsoft Office Word	Important	7.8	Remote Code Execution	No	No
CVE-2024-21381	Microsoft Azure Active Directory B2C Spoofing Vulnerability	Azure Active Directory	Important	6.8	Spoofing	No	No
CVE-2024-21386	.NET Denial of Service Vulnerability	.NET	Important	7.5	Denial of Service	No	No
CVE-2024-21389	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability	Microsoft Dynamics	Important	7.6	Spoofing	No	No
CVE-2024-21393	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability	Microsoft Dynamics	Important	7.6	Spoofing	No	No
CVE-2024-21394	Dynamics 365 Field Service Spoofing Vulnerability	Microsoft Dynamics	Important	7.6	Spoofing	No	No
CVE-2024-21396	Dynamics 365 Sales Spoofing Vulnerability	Microsoft Dynamics	Important	7.6	Spoofing	No	No
CVE-2024-21401	Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability	Azure Active Directory	Important	9.8	Elevation of Privilege	No	No
CVE-2024-21402	Microsoft Outlook Elevation of Privilege Vulnerability	Microsoft Office Outlook	Important	7.1	Elevation of Privilege	No	No
CVE-2024-21404	.NET Denial of Service Vulnerability	.NET	Important	7.5	Denial of Service	No	No
CVE-2024-21413	Microsoft Outlook Remote Code Execution Vulnerability	Microsoft Office	Critical	9.8	Remote Code Execution	No	No
CVE-2024-21420	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-20673	Microsoft Office Remote Code Execution Vulnerability	Microsoft Office	Important	7.8	Remote Code Execution	No	No
CVE-2024-20679	Azure Stack Hub Spoofing Vulnerability	Azure Stack	Important	6.5	Spoofing	No	No
CVE-2024-21304	Trusted Compute Base Elevation of Privilege Vulnerability	Trusted Compute Base	Important	4.1	Elevation of Privilege	No	No
CVE-2024-21315	Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability	Microsoft Defender for Endpoint	Important	7.8	Elevation of Privilege	No	No
CVE-2024-20695	Skype for Business Information Disclosure Vulnerability	Skype for Business	Important	5.7	Information Disclosure	No	No
CVE-2024-21328	Dynamics 365 Sales Spoofing Vulnerability	Microsoft Dynamics	Important	7.6	Spoofing	No	No
CVE-2024-20684	Windows Hyper-V Denial of Service Vulnerability	Windows Hyper-V	Critical	6.5	Denial of Service	No	No
CVE-2024-21339	Windows USB Generic Parent Driver Remote Code Execution Vulnerability	Windows USB Serial Driver	Important	6.4	Remote Code Execution	No	No
CVE-2024-21341	Windows Kernel Remote Code Execution Vulnerability	Windows Kernel	Important	6.8	Remote Code Execution	No	No
CVE-2024-21342	Windows DNS Client Denial of Service Vulnerability	Role: DNS Server	Important	7.5	Denial of Service	No	No
CVE-2024-21343	Windows Network Address Translation (NAT) Denial of Service Vulnerability	Windows Internet Connection Sharing (ICS)	Important	5.9	Denial of Service	No	No
CVE-2024-21344	Windows Network Address Translation (NAT) Denial of Service Vulnerability	Windows Internet Connection Sharing (ICS)	Important	5.9	Denial of Service	No	No
CVE-2024-21345	Windows Kernel Elevation of Privilege Vulnerability	Windows Kernel	Important	8.8	Elevation of Privilege	No	No
CVE-2024-21346	Win32k Elevation of Privilege Vulnerability	Windows Win32K – ICOMP	Important	7.8	Elevation of Privilege	No	No
CVE-2024-21347	Microsoft ODBC Driver Remote Code Execution Vulnerability	SQL Server	Important	7.5	Remote Code Execution	No	No
CVE-2024-21348	Internet Connection Sharing (ICS) Denial of Service Vulnerability	Windows Internet Connection Sharing (ICS)	Important	7.5	Denial of Service	No	No
CVE-2024-21353	Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability	Microsoft WDAC ODBC Driver	Important	8.8	Remote Code Execution	No	No
CVE-2024-21355	Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability	Windows Message Queuing	Important	7	Elevation of Privilege	No	No
CVE-2024-21356	Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability	Windows LDAP – Lightweight Directory Access Protocol	Important	6.5	Denial of Service	No	No
CVE-2024-21359	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-21362	Windows Kernel Security Feature Bypass Vulnerability	Windows Kernel	Important	5.5	Security Feature Bypass	No	No
CVE-2024-21363	Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	Windows Message Queuing	Important	7.8	Remote Code Execution	No	No
CVE-2024-21364	Microsoft Azure Site Recovery Elevation of Privilege Vulnerability	Azure Site Recovery	Moderate	9.3	Elevation of Privilege	No	No
CVE-2024-21365	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-21367	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-21368	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-21370	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-21374	Microsoft Teams for Android Information Disclosure	Microsoft Teams for Android	Important	5	Information Disclosure	No	No
CVE-2024-21376	Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability	Microsoft Azure Kubernetes Service	Important	9	Remote Code Execution	No	No
CVE-2024-21377	Windows DNS Information Disclosure Vulnerability	Microsoft Windows DNS	Important	7.1	Information Disclosure	No	No
CVE-2024-21378	Microsoft Outlook Remote Code Execution Vulnerability	Microsoft Office Outlook	Important	8	Remote Code Execution	No	No
CVE-2024-21380	Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability	Microsoft Dynamics	Critical	8	Information Disclosure	No	No
CVE-2024-21384	Microsoft Office OneNote Remote Code Execution Vulnerability	Microsoft Office OneNote	Important	7.8	Remote Code Execution	No	No
CVE-2024-21391	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	Microsoft WDAC OLE DB provider for SQL	Important	8.8	Remote Code Execution	No	No
CVE-2024-21395	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability	Microsoft Dynamics	Important	8.2	Spoofing	No	No
CVE-2024-21397	Microsoft Azure File Sync Elevation of Privilege Vulnerability	Azure File Sync	Important	5.3	Elevation of Privilege	No	No
CVE-2024-21403	Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability	Microsoft Azure Kubernetes Service	Important	9	Elevation of Privilege	No	No
CVE-2024-21405	Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability	Windows Message Queuing	Important	7	Elevation of Privilege	No	No
CVE-2024-21406	Windows Printing Service Spoofing Vulnerability	Microsoft Windows	Important	7.5	Spoofing	No	No
CVE-2024-21410	Microsoft Exchange Server Elevation of Privilege Vulnerability	Microsoft Exchange Server	Critical	9.8	Elevation of Privilege	No	No
CVE-2024-21412	Internet Shortcut Files Security Feature Bypass Vulnerability	Internet Shortcut Files	Important	8.1	Security Feature Bypass	Yes	No

Frontline.Cloud will include the Microsoft Patch Tuesday checks in the NIRV 4.34.0 and Frontline Agent 2.3 releases.

• Microsoft addressed 49 vulnerabilities in this release, including 2 rated as Critical and 12 Remote Code Execution vulnerabilities.

CVE/Advisory	Title	Tag	Microsoft Severity Rating	Base Score	Microsoft Impact	Exploited	Publicly Disclosed
CVE-2024-20666	BitLocker Security Feature Bypass Vulnerability	Windows BitLocker	Important	6.6	Security Feature Bypass	No	No
CVE-2024-20674	Windows Kerberos Security Feature Bypass Vulnerability	Windows Authentication Methods	Critical	9	Security Feature Bypass	No	No
CVE-2024-20677	Microsoft Office Remote Code Execution Vulnerability	Microsoft Office	Important	7.8	Remote Code Execution	No	No
CVE-2024-20676	Azure Storage Mover Remote Code Execution Vulnerability	Azure Storage Mover	Important	8	Remote Code Execution	No	No
CVE-2024-20654	Microsoft ODBC Driver Remote Code Execution Vulnerability	Windows ODBC Driver	Important	8	Remote Code Execution	No	No
CVE-2024-20657	Windows Group Policy Elevation of Privilege Vulnerability	Windows Group Policy	Important	7	Elevation of Privilege	No	No
CVE-2024-20658	Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability	Microsoft Virtual Hard Drive	Important	7.8	Elevation of Privilege	No	No
CVE-2024-20680	Windows Message Queuing Client (MSMQC) Information Disclosure	Windows Message Queuing	Important	6.5	Information Disclosure	No	No
CVE-2024-20682	Windows Cryptographic Services Remote Code Execution Vulnerability	Windows Cryptographic Services	Important	7.8	Remote Code Execution	No	No
CVE-2024-20683	Win32k Elevation of Privilege Vulnerability	Windows Win32K	Important	7.8	Elevation of Privilege	No	No
CVE-2024-20690	Windows Nearby Sharing Spoofing Vulnerability	Windows Nearby Sharing	Important	6.5	Spoofing	No	No
CVE-2024-20691	Windows Themes Information Disclosure Vulnerability	Windows Themes	Important	4.7	Information Disclosure	No	No
CVE-2024-20694	Windows CoreMessaging Information Disclosure  Vulnerability	Windows Collaborative Translation Framework	Important	5.5	Information Disclosure	No	No
CVE-2022-35737	MITRE: CVE-2022-35737 SQLite allows an array-bounds overflow	SQLite	Important	N/A	Remote Code Execution	No	No
CVE-2024-20696	Windows Libarchive Remote Code Execution Vulnerability	Windows Libarchive	Important	7.3	Remote Code Execution	No	No
CVE-2024-20697	Windows Libarchive Remote Code Execution Vulnerability	Windows Libarchive	Important	7.3	Remote Code Execution	No	No
CVE-2024-20698	Windows Kernel Elevation of Privilege Vulnerability	Windows Kernel	Important	7.8	Elevation of Privilege	No	No
CVE-2024-20699	Windows Hyper-V Denial of Service Vulnerability	Windows Hyper-V	Important	5.5	Denial of Service	No	No
CVE-2024-20700	Windows Hyper-V Remote Code Execution Vulnerability	Windows Hyper-V	Critical	7.5	Remote Code Execution	No	No
CVE-2024-21305	Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability	Unified Extensible Firmware Interface	Important	4.4	Security Feature Bypass	No	No
CVE-2024-21307	Remote Desktop Client Remote Code Execution Vulnerability	Remote Desktop Client	Important	7.5	Remote Code Execution	No	No
CVE-2024-21313	Windows TCP/IP Information Disclosure Vulnerability	Windows TCP/IP	Important	5.3	Information Disclosure	No	No
CVE-2024-21325	Microsoft Printer Metadata Troubleshooter Tool Remote Code Execution Vulnerability	Microsoft Devices	Important	N/A	Remote Code Execution	No	No
CVE-2024-20672	.NET Core and Visual Studio Denial of Service Vulnerability	.NET Core & Visual Studio	Important	7.5	Denial of Service	No	No
CVE-2024-0056	Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability	SQL Server	Important	8.7	Repudiation:Security Feature Bypass	No	No
CVE-2024-0057	NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability	.NET and Visual Studio	Important	9.1	Security Feature Bypass	No	No
CVE-2024-20652	Windows HTML Platforms Security Feature Bypass Vulnerability	Windows Scripting	Important	7.5	Security Feature Bypass	No	No
CVE-2024-20653	Microsoft Common Log File System Elevation of Privilege Vulnerability	Windows Common Log File System Driver	Important	7.8	Elevation of Privilege	No	No
CVE-2024-20655	Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability	Windows Online Certificate Status Protocol (OCSP) SnapIn	Important	6.6	Remote Code Execution	No	No
CVE-2024-20656	Visual Studio Elevation of Privilege Vulnerability	Visual Studio	Important	7.8	Elevation of Privilege	No	No
CVE-2024-20660	Microsoft Message Queuing Information Disclosure Vulnerability	Windows Message Queuing	Important	6.5	Information Disclosure	No	No
CVE-2024-20661	Microsoft Message Queuing Denial of Service Vulnerability	Windows Message Queuing	Important	7.5	Denial of Service	No	No
CVE-2024-20662	Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability	Windows Online Certificate Status Protocol (OCSP) SnapIn	Important	4.9	Information Disclosure	No	No
CVE-2024-20663	Windows Message Queuing Client (MSMQC) Information Disclosure	Windows Message Queuing	Important	6.5	Information Disclosure	No	No
CVE-2024-20664	Microsoft Message Queuing Information Disclosure Vulnerability	Windows Message Queuing	Important	6.5	Information Disclosure	No	No
CVE-2024-21316	Windows Server Key Distribution Service Security Feature Bypass	Windows Server Key Distribution Service	Important	6.1	Security Feature Bypass	No	No
CVE-2024-20681	Windows Subsystem for Linux Elevation of Privilege Vulnerability	Windows Subsystem for Linux	Important	7.8	Elevation of Privilege	No	No
CVE-2024-20686	Win32k Elevation of Privilege Vulnerability	Windows Win32 Kernel Subsystem	Important	7.8	Elevation of Privilege	No	No
CVE-2024-20687	Microsoft AllJoyn API Denial of Service Vulnerability	Windows AllJoyn API	Important	7.5	Denial of Service	No	No
CVE-2024-20692	Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability	Windows Local Security Authority Subsystem Service (LSASS)	Important	5.7	Information Disclosure	No	No
CVE-2024-21306	Microsoft Bluetooth Driver Spoofing Vulnerability	Microsoft Bluetooth Driver	Important	5.7	Spoofing	No	No
CVE-2024-21309	Windows Kernel-Mode Driver Elevation of Privilege Vulnerability	Windows Kernel-Mode Drivers	Important	7.8	Elevation of Privilege	No	No
CVE-2024-21310	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability	Windows Cloud Files Mini Filter Driver	Important	7.8	Elevation of Privilege	No	No
CVE-2024-21311	Windows Cryptographic Services Information Disclosure Vulnerability	Windows Cryptographic Services	Important	5.5	Information Disclosure	No	No
CVE-2024-21312	.NET Framework Denial of Service Vulnerability	.NET Framework	Important	7.5	Denial of Service	No	No
CVE-2024-21314	Microsoft Message Queuing Information Disclosure Vulnerability	Windows Message Queuing	Important	6.5	Information Disclosure	No	No
CVE-2024-21318	Microsoft SharePoint Server Remote Code Execution Vulnerability	Microsoft Office SharePoint	Important	8.8	Remote Code Execution	No	No
CVE-2024-21319	Microsoft Identity Denial of service vulnerability	Microsoft Identity Services	Important	6.8	Denial of Service	No	No
CVE-2024-21320	Windows Themes Spoofing Vulnerability	Windows Themes	Important	6.5	Spoofing	No	No

Vulnerability Management may not be the most glamorous aspect of cybersecurity. But just like car insurance, brushing your teeth, and yearly physicals – it is absolutely vital to catching problems before it’s too late.  It’s no secret that many companies struggle for resources, especially their security departments.  And some unfortunately decide to skip security fundamentals that don’t include trendy buzz words. The drawback is that bypassing these proactive basics – like vulnerability management – will virtually guarantee you will encounter problems and larger expenses down the road. It’s like the old saying – an ounce of prevention is worth a pound of cure. In this case, if you think you can’t afford or don’t have time for vulnerability management, you certainly don’t have the resources to deal with the likes of a ransomware or DDOS attack resulting in a data breach or outage.    

Here are some common reasons companies give for skipping proactive security steps like vulnerability management:

“I’m too small to hack” 

Alas, there is no such company. It’s important to remember that most of the time, a cyberattack is very impersonal (read: it’s not about you). Let’s say you have less than $100,000 in revenue? You’re still likely to be a key link in a supply chain to a bigger partner. Even if that’s not the case, it’s a fact that your employees have bank accounts, SSNs, and a network of scammable friends malicious actors could exploit. If you have employees, then you also have personal data that is worth time and money to cyber attackers.  

For example, attackers targeted a $11-billion-dollar American retail chain via its HVAC vendor.  The cybercriminals assumed  that the HVAC company, a link in the retailer giant’s supply chain, would be an easier mark. The resulting breach cost  a total of $162 million out the door.  

It’s important to remember that size is relative.  A “small” consulting firm can have several multimillion-dollar clients. Companies that are smaller than Fortune 500 members can still be very lucrative targets – either themselves or via their supply chain.  Companies of all sizes must employ proactive measures like vulnerability management to protect themselves, clients, and business partners.  

Any organizations should take steps to ensure they don’t harbor any lingering cyberhealth issues like unpatched, known vulnerabilities. “What’s the worst that can happen?”  Well, for starters, you can go out of business. Many businesses aren’t built to weather a catastrophic data breach , so it’s best to play it safe. Remember, hope isn’t a strategy.  

Through IBM’s report, we’ve learned that the average cost of a data breach this year is $4.45 million USD. The average annual revenue of a small business in the US is $53,000 and A 2021 Hiscox report found that the average cost of a cyberattack in the US was $25,612. No matter how you cut it, facing a data breach could put a lot of smaller enterprises out of business.  

Larger businesses hardly fare better. While they may be able to withstand the financial cost (though who wants to), there are also the lawsuits and regulatory fines that can pile up swiftly. 

In addition, the reputational damage and loss of trust is another factor all its own. Even if the enterprise is able to stand up to the PR firestorm, fines, and residual costs, – 21-43% of consumers won’t shop with a brand again once it has suffered a data breach. Plus, in the Executive Suite, more C-levels are being held personally responsible for instances of data exfiltration, cyberattack, and data privacy lapses. And it doesn’t stop at the top.  One in four employees reported losing a job after making a security error that compromised the company.  Proactively protecting your infrastructure by identify and eliminating weaknesses means fewer opportunities for attacks that can fool the most vulnerable part of your company – your staff. 

“We don’t have the resources” 

Every company has resources, it’s just a matter of how they are allocated and what is prioritized.    If your organization’s security team is stretched onion-skin thin, there are options.  Managed Security Service Providers (MSSPs) can help by acting as an extension of your internal team. They can perform vulnerability scans, prioritize the outcomes, and help you remediate. Using the right tools can make a difference as well. If your team is empowered with a modern VM solution that is easy to use, provides risk-based prioritization, and offers intuitive reporting, they will be able to manage vulnerabilities and report on security efforts efficiently, optimizing the use of your scarce IT resources.   

Vulnerability scanning is like insurance. You hate paying the premiums, but if something happens, you never say “I wish I had my $367 a month back so I could instead pay $15,000 out of pocket.”  Similarly, the relatively low costs of a vulnerability scanning solution, or the MSSP that will provide it, are negligible when compared with the fact they can help you avoid compliance fines, sidestep a PR disaster, keep your data, and ultimately stay in business.  

“I’m afraid of what we’ll find” 

It’s the ostrich with its head in the sand syndrome. Fear of the results – and an attitude of incredulity when it comes to the next steps – stops many a good company from taking proactive measures. In today’s threat climate, plausible deniability is not an excuse. Companies are liable under a number of standards (GDPR, HIPAA, SOX, CCPA, and more) and fines and penalties can now be assigned to executives and those deemed responsible, either for their actions or inactions. Vulnerability management is a small price to pay for job security and the chance to keep your reputation intact.  

“We’ve got XYZ technology already – we’ve got it covered”  

Two decades ago, it was firewalls. Then next-generation firewalls. Then Network Detection and Response, DDoS, and a host of anything with heuristics and behavioral-driven detection. And those are all great. They’re just all reactive, and only helpful after an attack has occurred. None of them can do what vulnerability management can.  

You need defense-in-depth. There is no sense in arming a battleship but neglecting to test for water leaks. You’re putting your resources at risk and undermining the whole operation by not completing the fundamental safety measures. Attackers will find your weakest link – and they will look for the path of least resistance first.  

“We’re not even sure what to do” 

This is understandable. Vulnerability scans can reveal a host of opportunities to shore up defenses, and without the right guidance, the task can seem insurmountable. This is where an outsourced vulnerability management program can help.  

We know what to do. We know what you’re looking at, and how you should prioritize, and even how to get it done. We can help. By meeting with you on a monthly, weekly, or even bi-weekly basis we can help establish your VM program and the next steps that will make this a palatable, sustainable part of your cybersecurity toolbox. And it will save you a lot of trouble down the road. 

“We don’t want to interrupt operations” 

A lot of companies are afraid that regular vulnerability scans will interrupt the flow of operations. If they’re done right, they won’t have to. And there’s no interruption greater than the cyberattack that can result from failing to do so in the first place. It’s like saying you’re too busy to stop for gas; once the tank is empty, you’ll have plenty of time to wait.  

“We only scan the important stuff” 

A partway solution we’ve seen (which is really no solution at all) is companies only scanning their “vital” assets, or Crown Jewels. Rationalizing that this saves time, money, and resources, they don’t realize that it actually wastes the good you’ve done by leaving other glaring holes open somewhere else. For example, servers and payment systems will get scanned while employee items like personal PCs, mobile devices, and laptops get left out. When an attacker cases your company, those easy-to-breach, often ignored spots are the first place they’ll go. If an employee has downloaded a personal app or service and uses the same device for work, that undiscovered asset becomes Shadow IT that the SOC can not protect. 

Attackers don’t care how they get into the network. In an attempted attack earlier this year on a security firm, attackers exploited the personal email of a new employee in order to pivot further into the network and exfiltrate data. The attempt was ultimately unsuccessful, but the lesson is sobering. While we’re looking high, they’re looking low in terms of technical sophistication and difficulty. It’s time to start thinking like an attacker and proactively locking all the doors and plugging all the leaks. Complete and consistent vulnerability management it is this cornerstone of this strategy.  

“We did that last year” 

That brings us to another point. Vulnerability management is no more  one-and-done than is going to the gym, annual check-ups, or eating. They have to be done often to make any affect. Most organizations are evolving, with changing infrastructures and endpoints. It‘s likely your infrastructure will not look the same from one month to the next. Once a year vulnerability scans are too infrequent to protect a moving target. Attack vectors and methods continue to evolve as well, unearthing new weaknesses all the time. According to the National Vulnerability Database, there are upwards of about 2,000 new CVEs discovered every month. And each new service, app, or piece of technology comes with code that can likely have its own vulnerabilities as well. That’s a lot to keep track of, so accurate risk-based prioritization and management of vulnerabilities is essential.  

Being Proactive with Vulnerability Management 

Ultimately, a security strategy that is solely reactive is only half of a strategy.  Proactively identifying weaknesses before they are exploited can avoid a huge, costly debacle down the road.  Vulnerability Management may not be the sexiest thing in cybersecurity, but it is the foundation on which your strategy should be built.  

Modern VM Solutions 

Choosing a modern vulnerability management solution will save you time, headaches, and most likely data in the years to come.  Fortra Vulnerability Management  helps you get the ball rolling on your VM strategy and keep it rolling. More than a one-time fix, it’s a long-term solution that helps you identify, classify, and prioritize vulnerabilities on an ongoing basis. Stay ahead of vulnerabilities, old and new, and set your team up for proactive success in the years to come. 

Additional benefits include: 

• Less set up. Fortra VM is quick to stand up and easy to use, shortening your time-to-value.  
• Simplified action steps. Fortra VM provides easy to understand on demand reports, giving you all the information you need to take action, and in the right priority. 
• Expert support to help you. You don’t have to go it alone. Our superior support staff of dedicated customer advocates are here to lend an extra hand, offer expertise, and extend guidance.  

Today’s Microsoft Security Update, Microsoft addressed 59 vulnerabilities, including five rated as Critical.

• This release also includes three republished non-Microsoft CVEs to address issues in Microsoft Edge (Chromium-based), Visual Studio Code, and 3D Viewer.
• Two of the CVEs fixed in this month’s release are also being exploited in the wild.
  • CVE-2023-36802
    • A privilege escalation vulnerability in the Microsoft Streaming Service Proxy could allow an attacker to gain SYSTEM privileges on the affected system.
  • CVE-2023-36761
    • This information disclosure vulnerability in Microsoft Word could result in the disclosure of NTLM hashes.

CVE/Advisory	Title	Tag	Microsoft Severity Rating	Base Score	Microsoft Impact	Exploited	Publicly Disclosed
CVE-2023-35355	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability	Windows Cloud Files Mini Filter Driver	Important	7.8	Elevation of Privilege	No	No
CVE-2023-38162	DHCP Server Service Denial of Service Vulnerability	Windows DHCP Server	Important	7.5	Denial of Service	No	No
CVE-2023-38161	Windows GDI Elevation of Privilege Vulnerability	Windows GDI	Important	7.8	Elevation of Privilege	No	No
CVE-2023-38156	Azure HDInsight Apache Ambari Elevation of Privilege Vulnerability	Azure HDInsights	Important	7.2	Elevation of Privilege	No	No
CVE-2023-38152	DHCP Server Service Information Disclosure Vulnerability	Windows DHCP Server	Important	5.3	Information Disclosure	No	No
CVE-2023-38150	Windows Kernel Elevation of Privilege Vulnerability	Windows Kernel	Important	7.8	Elevation of Privilege	No	No
CVE-2023-38149	Windows TCP/IP Denial of Service Vulnerability	Windows TCP/IP	Important	7.5	Denial of Service	No	No
CVE-2023-38148	Internet Connection Sharing (ICS) Remote Code Execution Vulnerability	Windows Internet Connection Sharing (ICS)	Critical	8.8	Remote Code Execution	No	No
CVE-2023-38147	Windows Miracast Wireless Display Remote Code Execution Vulnerability	Microsoft Windows Codecs Library	Important	8.8	Remote Code Execution	No	No
CVE-2023-38146	Windows Themes Remote Code Execution Vulnerability	Windows Themes	Important	8.8	Remote Code Execution	No	No
CVE-2023-38144	Windows Common Log File System Driver Elevation of Privilege Vulnerability	Windows Common Log File System Driver	Important	7.8	Elevation of Privilege	No	No
CVE-2023-38143	Windows Common Log File System Driver Elevation of Privilege Vulnerability	Windows Common Log File System Driver	Important	7.8	Elevation of Privilege	No	No
CVE-2023-38142	Windows Kernel Elevation of Privilege Vulnerability	Windows Kernel	Important	7.8	Elevation of Privilege	No	No
CVE-2023-38141	Windows Kernel Elevation of Privilege Vulnerability	Windows Kernel	Important	7.8	Elevation of Privilege	No	No
CVE-2023-38140	Windows Kernel Information Disclosure Vulnerability	Windows Kernel	Important	5.5	Information Disclosure	No	No
CVE-2023-38139	Windows Kernel Elevation of Privilege Vulnerability	Windows Kernel	Important	7.8	Elevation of Privilege	No	No
CVE-2023-36805	Windows MSHTML Platform Security Feature Bypass Vulnerability	Windows Scripting	Important	7	Security Feature Bypass	No	No
CVE-2023-36804	Windows GDI Elevation of Privilege Vulnerability	Windows GDI	Important	7.8	Elevation of Privilege	No	No
CVE-2023-36803	Windows Kernel Information Disclosure Vulnerability	Windows Kernel	Important	5.5	Information Disclosure	No	No
CVE-2023-36802	Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability	Microsoft Streaming Service	Important	7.8	Elevation of Privilege	Yes	No
CVE-2023-36801	DHCP Server Service Information Disclosure Vulnerability	Windows DHCP Server	Important	5.3	Information Disclosure	No	No
CVE-2023-36767	Microsoft Office Security Feature Bypass Vulnerability	Microsoft Office	Important	4.3	Security Feature Bypass	No	No
CVE-2023-36766	Microsoft Excel Information Disclosure Vulnerability	Microsoft Office Excel	Important	7.8	Information Disclosure	No	No
CVE-2023-36765	Microsoft Office Elevation of Privilege Vulnerability	Microsoft Office	Important	7.8	Elevation of Privilege	No	No
CVE-2023-36759	Visual Studio Elevation of Privilege Vulnerability	Visual Studio	Important	6.7	Elevation of Privilege	No	No
CVE-2023-36758	Visual Studio Elevation of Privilege Vulnerability	Visual Studio	Important	7.8	Elevation of Privilege	No	No
CVE-2023-36757	Microsoft Exchange Server Spoofing Vulnerability	Microsoft Exchange Server	Important	8	Spoofing	No	No
CVE-2023-36756	Microsoft Exchange Server Remote Code Execution Vulnerability	Microsoft Exchange Server	Important	8	Remote Code Execution	No	No
CVE-2023-36745	Microsoft Exchange Server Remote Code Execution Vulnerability	Microsoft Exchange Server	Important	8	Remote Code Execution	No	No
CVE-2023-36744	Microsoft Exchange Server Remote Code Execution Vulnerability	Microsoft Exchange Server	Important	8	Remote Code Execution	No	No
CVE-2023-36742	Visual Studio Code Remote Code Execution Vulnerability	Visual Studio Code	Important	7.8	Remote Code Execution	No	No
CVE-2023-36736	Microsoft Identity Linux Broker Remote Code Execution Vulnerability	Microsoft Identity Linux Broker	Important	4.4	Remote Code Execution	No	No
CVE-2023-41764	Microsoft Office Spoofing Vulnerability	Microsoft Office	Moderate	5.5	Spoofing	No	No
CVE-2022-41303	AutoDesk: CVE-2022-41303 use-after-free vulnerability in Autodesk® FBX® SDK 2020 or prior	3D Viewer	Important	N/A	Remote Code Execution	No	No
CVE-2023-29332	Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability	Microsoft Azure Kubernetes Service	Critical	7.5	Elevation of Privilege	No	No
CVE-2023-33136	Azure DevOps Server Remote Code Execution Vulnerability	Azure DevOps	Important	8.8	Remote Code Execution	No	No
CVE-2023-36886	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability	Microsoft Dynamics	Important	7.6	Spoofing	No	No
CVE-2023-38164	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability	Microsoft Dynamics	Important	7.6	Spoofing	No	No
CVE-2023-38163	Windows Defender Attack Surface Reduction Security Feature Bypass	Windows Defender	Important	7.8	Security Feature Bypass	No	No
CVE-2023-38160	Windows TCP/IP Information Disclosure Vulnerability	Windows TCP/IP	Important	5.5	Information Disclosure	No	No
CVE-2023-38155	Azure DevOps Server Remote Code Execution Vulnerability	Azure DevOps	Important	7	Elevation of Privilege	No	No
CVE-2023-36800	Dynamics Finance and Operations Cross-site Scripting Vulnerability	Microsoft Dynamics Finance & Operations	Important	7.6	Spoofing	No	No
CVE-2023-36799	.NET Core and Visual Studio Denial of Service Vulnerability	.NET Core & Visual Studio	Important	6.5	Denial of Service	No	No
CVE-2023-36796	Visual Studio Remote Code Execution Vulnerability	.NET and Visual Studio	Important/Critical	7.8	Remote Code Execution	No	No
CVE-2023-36794	Visual Studio Remote Code Execution Vulnerability	.NET and Visual Studio	Important	7.8	Remote Code Execution	No	No
CVE-2023-36793	Visual Studio Remote Code Execution Vulnerability	.NET and Visual Studio	Important/Critical	7.8	Remote Code Execution	No	No
CVE-2023-36792	Visual Studio Remote Code Execution Vulnerability	.NET and Visual Studio	Important/Critical	7.8	Remote Code Execution	No	No
CVE-2023-36788	.NET Framework Remote Code Execution Vulnerability	.NET Framework	Important	7.8	Remote Code Execution	No	No
CVE-2023-36777	Microsoft Exchange Server Information Disclosure Vulnerability	Microsoft Exchange Server	Important	5.7	Information Disclosure	No	No
CVE-2023-36773	3D Builder Remote Code Execution Vulnerability	3D Builder	Important	7.8	Remote Code Execution	No	No
CVE-2023-36772	3D Builder Remote Code Execution Vulnerability	3D Builder	Important	7.8	Remote Code Execution	No	No
CVE-2023-36771	3D Builder Remote Code Execution Vulnerability	3D Builder	Important	7.8	Remote Code Execution	No	No
CVE-2023-36770	3D Builder Remote Code Execution Vulnerability	3D Builder	Important	7.8	Remote Code Execution	No	No
CVE-2023-36764	Microsoft SharePoint Server Elevation of Privilege Vulnerability	Microsoft Office SharePoint	Important	8.8	Elevation of Privilege	No	No
CVE-2023-36763	Microsoft Outlook Information Disclosure Vulnerability	Microsoft Office Outlook	Important	7.5	Information Disclosure	No	No
CVE-2023-36762	Microsoft Word Remote Code Execution Vulnerability	Microsoft Office Word	Important	7.3	Remote Code Execution	No	No
CVE-2023-36761	Microsoft Word Information Disclosure Vulnerability	Microsoft Office Word	Important	6.2	Information Disclosure	Yes	Yes
CVE-2023-36760	3D Viewer Remote Code Execution Vulnerability	3D Viewer	Important	7.8	Remote Code Execution	No	No
CVE-2023-39956	Electron: CVE-2023-39956 -Visual Studio Code Remote Code Execution Vulnerability	Visual Studio Code	Important	N/A	Remote Code Execution	No	No
CVE-2023-36740	3D Viewer Remote Code Execution Vulnerability	3D Viewer	Important	7.8	Remote Code Execution	No	No
CVE-2023-36739	3D Viewer Remote Code Execution Vulnerability	3D Viewer	Important	7.8	Remote Code Execution	No	No
CVE-2023-4863	Chromium: CVE-2023-4863 Heap buffer overflow in WebP	Microsoft Edge (Chromium-based)		N/A

When school is out for summer, it seems like everyone is on vacation – everyone except your (un)friendly neighborhood cybercriminals.

Something about the summer months puts us off our guard and threat actors on high alert. The only way to stay safe is to know what’s causing the trouble in the first place. We’ve packed our sunscreen – now read on to find out how to make sure your security also doesn’t get burned.

Summer Cybersecurity Weaknesses to Look Out For

1. Holidays mean lower staff counts | Summer is the time for family vacations, trips abroad, and lower rates of qualified cybersecurity personnel on duty. Additionally, temporary staff may also not have had the same security awareness training and therefore be more susceptible to phishing emails, insecure file transfers, and other unsafe practices. Threat actors can take advantage of this natural deficiency, leading to potentially increased risks of phishing and lower response times on urgent alerts. Together, this make for a bad combination.
2. Servers can’t beat the heat | Everyone knows that a hot server is a slow server. An overheated server can severely malfunction or even crash, leaving companies not only potentially incapacitated, but also vulnerable. As heat waves are increasingly taking down data centers, the potential cybersecurity risks such incidents pose is becoming clear. Hastily bringing a server back online could actually compound the problem, accidentally opening more avenues of attack by failing to take the proper precautions and set it up right. And, if companies reduce operations to prevent servers from getting too hot, such measures may have unintended consequences of increasing risk to the enterprise.   
3. Vacation means poolside public WiFi | Just because remote work allows you to work from anywhere doesn’t mean it’s safe to connect everywhere. Public WiFi is not the place to log in and check a quick work email – even for a minute. It only takes a moment for the right threat actor to infect your device with malware, snoop for confidential data, or hijack your session. It’s annoying when it happens to your Gmail account. It’s detrimental when it happens to your Microsoft Outlook work account. An attacker may scan sensitive information, download your contacts, and pivot to others within your organization. On top of that, vacation is a time when those who do find time to work are often distracted and may be more careless about what they’re opening. And the threats are out there: Business Email Compromise (BEC) resulted in $2.7 billion dollars in losses in 2022.

Protecting Your Organization All Year Long

No one wants to come back from a week off to find an IT disaster waiting for them. Here are some tips to stay safe:

1. Vulnerability Scanning | Never fly blind when it comes to your network, especially when you’re out of the office. These scans can be scheduled and automated, making it easy to keep an eye on things, even with staff outages. These scans provide the foundation for any subsequent security efforts – you can’t fix what you can’t see.
2. Pen Testing | Pen testing is great for making sure your systems are as good-to-go as you think they are. They can not only exploit and prioritize vulnerabilities but can also make you aware of misconfigurations – like if that server got back online too quickly and left the enterprise exposed. You don’t want to go on vacations with systems unpatched, and pen testing on a regular basis can help your team take on a proactive – not reactive – approach to security.
3. Red Team Exercises | Make sure your security team is prepared by putting them to the test. Red teaming doesn’t just assess defenses, it also helps train the blue team. Facing down real-world threat tactics goes beyond even the preparation of knowing what to patch. It tests their security nervous system, anticipates how well they will do under pressure, and seasons them so if the worst happens while the team is short-staffed everyone will still know what to do.
4. Use a VPN | You never know where your adventures might lead, or how tempted you might be to fall for public WiFi when your data runs out in a strange city. For instance, the FBI has explicitly warned against cell-charging kiosks, stating that “Cybersecurity experts warn that bad actors can load malware onto public USB charging stations to maliciously access electronic devices while they are being charged.” It’s safer to make a habit of using a VPN – either for personal or work use – every time you log in. Cybercriminals are working when you’re not, and every in is a potential liability.
5. Make social engineering tests a must | All a threat actor needs is one weak link. You can prepare team members with a phishing campaign that tests how they react to malicious emails they might encounter. This can help identify who is susceptible and in need of additional training on how to stay safe and spot suspicious activity. You never know who might be up late, checking emails in a hotel room while on vacation – off their guard and susceptible to click bait, ransomware-infested text links and other phishing emails.

The Best Defense is a Good Offense

Cybercriminals don’t sleep, and neither do we. The best defense is a good offense and Fortra’s Core Security has solutions to prepare your organization to stay sharp during the summer months and beyond.

Core Impact, Core Security’s flagship penetration testing tool, can integrate with top vulnerability scanners like beSECURE to maximize the impact of both. Adversary simulations and red team operations can be run with the help of Cobalt Strike and Outflank Security Tooling (OST), two powerful red teaming solutions ideal for deploying sophisticated adversary simulations. Best of all, these solutions can be bundled together so you can cost effectively accelerate your offensive security strategy.

If we’re not careful, we can get burned by more than just the sun this summer. Secure your enterprise with Core Security’s lineup of offensive security solutions and enjoy your time off.