Microsoft's January 2024 Windows Update Patches 48 New Vulnerabilities

Microsoft’s January 2024 Patch Tuesday fixes 48 security flaws across its software (two Critical, 46 Important), including a Kerberos authentication bypass (CVE-2024-20674, CVSS 9.0), a Hyper‑V remote code execution (CVE-2024-20700), a CLFS privilege escalation (CVE-2024-20653), and a System.Data.SqlClient security bypass (CVE-2024-0056); Microsoft reports no evidence these new issues were publicly known or under active attack, and additionally disabled FBX insertion in Office by default due to a related RCE risk.