Microsoft August 2024 Patch Tuesday fixes 9 zero-days, 6 exploited

Microsoft's August 2024 Patch Tuesday addresses 89 vulnerabilities — including six actively exploited zero-days and three additional publicly disclosed zero-days — covering remote code execution, elevation of privilege, information disclosure, denial of service, spoofing, and security feature bypass issues; several flaws grant SYSTEM privileges or allow RCE and at least one RCE (LPD) can be triggered by an unauthenticated network request, while others require user interaction or disabled security controls. The bulletin lists affected components (Windows kernel, Office apps, Edge, Azure components, drivers) and references active exploitation reports and research disclosures, advising organizations to apply updates.