Patch Tuesday roundup for October 2024

**October 2024 Patch Tuesday:** Microsoft published 117 CVEs this month; the report highlights two CVEs immediately added to CISA’s KEV with short remediation timelines—CVE-2024-43573 (MSHTML/Trident spoofing, a security feature bypass with active exploitation) and CVE-2024-43572 (Windows Management Console RCE via manipulated MSC files, observed in attacks leveraging GrimResource)—and recommends prompt application of the relevant Microsoft updates (including IE cumulative updates for MSHTML fixes) to mitigate ongoing exploitation risk.