Microsoft’s April 2024 Patch Tuesday includes two actively exploited zero-day vulnerabilities

Microsoft's April 2024 Patch Tuesday addresses 149 vulnerabilities, including two zero-days: CVE-2024-26234 (a signed proxy-driver/backdoor used to monitor/intercept traffic — exploitation detected) and CVE-2024-29988 (a SmartScreen bypass with functional exploit code delivered via zipped files). The bulletin highlights high-impact components (e.g., SQL Server, Windows Remote Access Connection Manager), and notes synchronized patching by other vendors such as Android, Chrome, and SAP.