Microsoft Patches Exploited Windows Zero-Days CVE-2024-30040 and CVE-2024-30051
Active Exploitation · 6 sources · Updated 4mo ago · First seen May 16, 2024
Microsoft released fixes for 61 vulnerabilities in its May security updates, including three zero-days and one critical flaw, with CVE-2024-30040 and CVE-2024-30051 confirmed as actively exploited in the wild. The patched issues affect core Microsoft products including Windows, Office, SharePoint, .NET, Visual Studio, and Windows Server, and include a Windows MSHTML Platform security feature bypass and a Windows DWM Core Library elevation-of-privilege flaw that can allow attackers to gain SYSTEM privileges.
Researchers who reported CVE-2024-30051 said they validated the Windows Desktop Window Manager flaw after finding a suspicious document uploaded to VirusTotal, then later observed an exploit in mid-April being used with QakBot and other malware. Kaspersky assessed that multiple threat actors likely had access to the exploit before the patch was released, underscoring the urgency for organizations to deploy Microsoft's updates immediately across affected Windows and server environments.
