Microsoft Patch Tuesday Fixes 139 Flaws Including Four Zero-Days
Active Exploitation · 5 sources · Updated 3mo ago · First seen Jul 11, 2024
Microsoft released security updates for 139 vulnerabilities across Windows, Windows Server, SharePoint, SQL Server, Office, .NET, Azure CycleCloud, and Visual Studio, including 54 remote code execution flaws, 5 critical issues, and 4 zero-days. The most severe vulnerabilities affected Microsoft SharePoint Server, the Windows Imaging Component, and the Windows Remote Desktop Licensing Service, expanding the risk of remote compromise, privilege escalation, spoofing, security feature bypass, unauthorized data access, and denial-of-service attacks.
Two of the zero-days, CVE-2024-38080 and CVE-2024-38112, were reported as actively exploited in the wild, increasing urgency for defenders to deploy the July updates. Microsoft also published advisories for additional vulnerabilities including CVE-2024-38023, CVE-2024-38060, CVE-2024-38074, and CVE-2024-38076, underscoring the breadth of the release and the need for rapid patching across enterprise Microsoft environments.
