Microsoft April 2024 Security Updates: Zero-Day Exploited, Critical Vulnerabilities Addressed

The Israel National Cyber Directorate (INCD) has issued a critical alert regarding Microsoft’s April 2024 security updates. On April 14th, Microsoft released approximately 163 security updates addressing vulnerabilities across its supported software. Additionally, 78 security updates were published for the Chromium-based Edge browser.

Of significant concern, one vulnerability is already being actively exploited in the wild as a zero-day. Details of another vulnerability have been publicly disclosed, increasing its potential for exploitation. The INCD highlights that 8 vulnerabilities are classified as critical, with 7 of these potentially allowing for remote code execution (RCE). Furthermore, 19 vulnerabilities are deemed highly likely to be exploited by attackers, and 20 vulnerabilities specifically enable RCE.

The INCD strongly advises organizations to thoroughly test these updates in a controlled environment before deploying them across their networks. Prompt installation of these patches is crucial to mitigate the risk posed by these actively exploited and critical vulnerabilities.

Attached Files:

• תוכן ההתרעה
• פירוט הפגיעויות