Loading story…
Microsoft released its October 2024 security updates with fixes for 118 vulnerabilities across Windows and other products, including 3 critical flaws, 5 zero-days, and 2 vulnerabilities reported as actively exploited in the wild. The zero-days highlighted in public reporting include CVE-2024-43573 in MSHTML, CVE-2024-43572 in Microsoft Management Console handling of .msc files, CVE-2024-6197 in libcurl, CVE-2024-20659 in Hyper-V, and CVE-2024-43583 in Winlogon. Microsoft documented the release in its Security Update Guide release notes.
The two exploited issues were identified as an MSHTML spoofing vulnerability and a Microsoft Management Console remote code execution flaw tied to malicious .msc files. Guidance accompanying the release urged organizations to prioritize rapid deployment of the October patches, with additional mitigation advice for CVE-2024-43583: administrators were advised to enable the official Microsoft IME to reduce exposure from vulnerable third-party input method editors affecting Winlogon.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Microsoft's October 2024 Patch Tuesday released fixes for 118 vulnerabilities across multiple products, including 3 critical flaws and 5 zero-days. Two of the addressed vulnerabilities were reported as actively exploited.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft released fixes for **117 vulnerabilities** across 15 product families, including **3 Critical**, **110 Important**, **3 Moderate**, and **1 Low** severity issues. Two flaws were already being exploited in the wild: `CVE-2024-43572` in **Microsoft Management Console** and `CVE-2024-43573` in the **Windows MSHTML Platform**. Microsoft also flagged eight additional vulnerabilities as more likely to be exploited within 30 days, while Windows accounted for the vast majority of the exposure with **93 CVEs** spanning remote code execution, elevation of privilege, and denial-of-service bugs. The most severe issues included `CVE-2024-43468`, a **Critical Microsoft Configuration Manager remote code execution** flaw with a **CVSS 9.8** score that requires an in-console update and additional hardening, and `CVE-2024-38124`, a **Windows Netlogon elevation of privilege** vulnerability with mitigation guidance. The release also addressed 15 Windows Mobile Broadband Driver flaws that generally require physical access or proximity, Windows 11 24H2-specific bugs such as `CVE-2024-43527` and `CVE-2024-43571`, and advisory items affecting Edge and curl-related components; Sophos said protections were available for `CVE-2024-43502`, `CVE-2024-43572`, and `CVE-2024-43573`.
Jun 29, 2026
Microsoft released its February 2025 security updates to address **61 vulnerabilities** across Windows, Office, SharePoint, Edge, Visual Studio, CBL Mariner, and other products. The bundle included **26 remote code execution flaws** and **four critical vulnerabilities**, with notable high-risk issues affecting **Microsoft Dynamics 365 Sales**, **Microsoft Excel**, **Windows LDAP**, and the **Windows DHCP Client Service**. Microsoft also published individual advisories for vulnerabilities including `CVE-2025-21376` and `CVE-2025-21177` as part of the release. The update cycle also fixed **two actively exploited zero-days**: `CVE-2025-21391` in **Windows Storage** and `CVE-2025-21418` in the **Windows Ancillary Function Driver for WinSock**. Security guidance accompanying the release urged organizations to prioritize deployment of the February patch bundle because the affected components are widely used across enterprise Windows environments and Microsoft application stacks.
Jul 24, 2026
Microsoft released security updates addressing **149 vulnerabilities** across Windows and other products, including **67 remote code execution flaws**, **3 critical issues**, and two zero-days that were already being exploited in the wild. The actively exploited bugs were tracked as **`CVE-2024-29988`**, a Windows SmartScreen security feature bypass with a **CVSS 8.8**, and **`CVE-2024-26234`**, a spoofing vulnerability with a **CVSS 6.7**. Reports said **Water Hydra** abused `CVE-2024-29988` to deliver malicious files, while `CVE-2024-26234` was identified during analysis of a malicious proxy driver operating as a backdoor and signed with a valid **Microsoft Windows Hardware Compatibility Publisher** certificate. Microsoft published the fixes as part of its March/April 2024 security release materials, and defenders were urged to deploy the updates quickly across affected Microsoft environments.
Jul 24, 2026