logo

5 Zero-Days in Microsoft's October Update to Patch Immediately

ID: 3909eb83-236c-524b-a973-39d9fff37f76

STIX ID: report--3909eb83-236c-524b-a973-39d9fff37f76

Feed Name: Dark Reading

Threat Score
85/100

Date Published: 2024-10-08

Date Updated: 2026-04-21

Author: Jai Vijayan, Contributing Writer

...
...

Microsoft's October 2024 security update patched 117 vulnerabilities across Windows and related products, including two actively exploited zero-days (an MSHTML spoofing bug and an MMC RCE), three publicly disclosed zero-days not yet observed in the wild (including a cURL RCE), and multiple critical RCEs affecting Configuration Manager, RDP, and a Visual Studio Code extension; organizations are urged to test and deploy updates promptly to mitigate potential widespread exploitation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.