CyberSecurity updates
Updated: 2024-10-14 06:22:57 Pacfic

Flag This

cisa.gov

Microsoft Windows Smart App Control and SmartScreen Zero-Day Vulnerability (CVE-2024-38217) Exploited Since 2018 Finally Patched - 3d


Read more: www.cisa.gov

A critical zero-day vulnerability impacting Windows Smart App Control (SAC) and SmartScreen security features, identified as CVE-2024-38217, has been actively exploited since at least 2018. This vulnerability allows attackers to bypass Windows security features and execute malicious code on systems. This vulnerability was patched in Microsoft’s September 2024 Patch Tuesday update. Organizations running vulnerable versions of Windows 10 and 11 must update their systems to the latest versions as soon as possible to mitigate this risk. This vulnerability highlights the importance of promptly applying security updates from vendors to avoid potential attacks.

References:

  • @BleepingComputer - Microsoft fixes a Windows Smart App Control and SmartScreen flaw exploited as a zero-day. - 3d
  • www.bleepingcomputer.com - Details the vulnerability and mentions that it has been exploited since 2018. - 3d
  • @BleepingComputer - Provides overview of September Patch Tuesday with 79 vulnerabilities and 4 zero-days - 3d
  • www.bleepingcomputer.com - Reports the September 2024 Patch Tuesday update from Microsoft. - 3d
  • cyberinsider.com - The article which first talked about the zero-days and the patch - 3d
  • www.tenable.com - Tenable's blog on this Patch Tuesday update and the vulnerabilities included - 2d
  • blog.sonicwall.com - Overview Microsoft’s September 2024 Patch Tuesday has 79 vulnerabilities, of which 30 are Elevation of Privilege. SonicWall Capture Labs threat research team has analyzed and addressed Microsoft’s security advisories for the month of September 2024 - 17h
  • www.nuspire.com - On September 10, 2024, Microsoft released its latest round of security updates as part of its monthly Patch Tuesday program. This month’s updates address a total of 79 vulnerabilities across various Microsoft products, including four zero-day vulnerabilities that have been actively exploited in the wild. - 17h

Classification:

  • HashTags: #Microsoft #Windows #ZeroDay
  • Company: Microsoft
  • Target: Windows 10 Windows 11
  • Product: Windows
  • Feature: Smart App Control SmartScreen
  • Type: 0Day
  • Severity: Major






This site is an experimental news aggregator using feeds I personally follow. You can reach me using contacts here if you have feedback. You can also find Flathis at Mastodon.