“Go patch your systems before that situation changes.” “It’s not stated how widely the exploit is being used in the wild, but it’s likely still targeted at this point and not broadly available,” assessed Dustin Childs with Trend Micro’s Zero Day Initiative. In its advisory, Microsoft said it received a report from the NSA that the flaw is under active attack. Of particular concern this month is CVE-2022-24521, which is a “privilege escalation” vulnerability in the Windows common log file system driver. Two of the flaws have been publicly detailed prior to this week, and one is already seeing active exploitation, according to a report from the U.S. Microsoft on Tuesday released updates to fix roughly 120 security vulnerabilities in its Windows operating systems and other software.
0 kommentar(er)
