Microsoft fixes Windows zero-day exploited in QakBot malware attacks

Microsoft patched a zero-day privilege escalation vulnerability in the Windows Desktop Window Manager (CVE-2024-30051) — a heap-based buffer overflow allowing escalation to SYSTEM — which Kaspersky and other security teams observed being exploited in the wild to deliver QakBot and other malware; multiple vendors reported active exploitation and Microsoft released a Patch Tuesday update.