CyberzSOC

The patches include fixes for critical and important-severity issues that could allow attackers to gain unauthorised access, execute arbitrary code, or elevate privileges. Three vulnerabilities were already being exploited The eight (8) zero-day vulnerabilities resolved in this update are: elevation of privilege vulnerabilities in Windows Hyper-V that were exploited in attacks to gain SYSTEM privileges on Windows devices. An attacker could convince a user to load a malicious file onto a vulnerable system and then convince the user to manipulate the specially crafted file, but not necessarily click or open the malicious file. Manipulating the malicious file could allow an attacker exfiltrated NTLM hashes to a remote server. three remote code execution vulnerabilities in Microsoft Access that could be exploited when opening specially crafted Microsoft Access documents. Microsoft also released fixes for 12 critical vulnerabilities, including: Microsoft Digest Authentication. in the Reliable Multicast Transport driver (RMCAST).