November Patch Tuesday release contains three critical remote code execution vulnerabilities

Microsoft’s November 2024 Patch Tuesday release includes 89 vulnerabilities (four rated critical and the rest important). The critical issues include RCE and privilege escalation flaws in Kerberos, a Hyper-V VMSwitch driver, Azure CycleCloud, and .NET/Visual Studio, though Microsoft assessed exploitation of those as "less likely." Several important vulnerabilities were marked as "exploitation more likely," and Microsoft detected exploitation for some of those. Cisco Talos published Snort and Snort 3 rules to detect attempts to exploit a subset of these vulnerabilities and recommends customers update their rule sets.