Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities

Microsoft's October Patch Tuesday fixes 117 CVEs across its products, including two publicly known vulnerabilities actively exploited in the wild (CVE-2024-43572 in MMC and CVE-2024-43573 in MSHTML). The update also addresses a publicly disclosed Winlogon elevation-of-privilege (CVE-2024-43583) and three critical RCE issues — notably CVE-2024-43468 (CVSS 9.8) in Configuration Manager — and Cisco Talos released Snort rules to detect attempts to exploit several of these flaws.