logo

Update now! Microsoft fixes two zero-days on February Patch Tuesday

ID: 0f71f576-5e6a-5726-99a1-08ee5a9c84e3

STIX ID: report--0f71f576-5e6a-5726-99a1-08ee5a9c84e3

Feed Name: Malwarebytes Blog

Threat Score
78/100

Date Published: 2024-02-14

Date Updated: 2026-04-28

...
...

Microsoft's February 2024 Patch Tuesday fixes 73 vulnerabilities, including two zero-days actively exploited in the wild (CVE-2024-21351 SmartScreen bypass and CVE-2024-21412 Internet Shortcut Files bypass) and a critical Outlook RCE (CVE-2024-21413). CISA has added the zero-days to its Known Exploited Vulnerabilities catalog, imposing remediation requirements for federal agencies, and other vendors (Adobe, Android, Ivanti, SAP) have issued synchronized updates.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.