Microsoft Management Console Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044280 KB5044273
Patch Tuesday
Patch Tuesday October 2024 – known issues, zero-days and what to do
On 8 Oct 2024 Microsoft fixed 130 vulnerabilities – critical: 6, already exploited (zero-days): 2. Known issues with the updates: none known.
130vulnerabilities
6critical
2zero-days
0known issues
What to do now
- Zero-days first: 2 vulnerabilities are already being exploited (CVE-2024-43572, CVE-2024-43573) – install the updates as soon as possible, starting with servers and exposed systems.
- 6 critical vulnerabilities (mainly Windows, Developer tools (.NET, Visual Studio …), Browser (Edge)) – roll out promptly after a short test.
- No issues are known so far with the updates of this month – test and roll out as usual.
Zero-days: already exploited
Windows MSHTML Platform Spoofing Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5044273 KB5044280 KB5044285 KB5044281
Critical vulnerabilities (6)
Microsoft Configuration Manager Remote Code Execution Vulnerability
System Center and Defender
Visual Studio Code extension for Arduino Remote Code Execution Vulnerability
Developer tools (.NET, Visual Studio …)
Microsoft Dataverse Elevation of Privilege Vulnerability
Microsoft Dynamics
Remote Desktop Protocol Server Remote Code Execution Vulnerability
Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044280 KB5044273
Imagine Cup site Information Disclosure Vulnerability
Azure
Power Platform Information Disclosure Vulnerability
Microsoft Dynamics
Updates (KB) of this month
KB numbers according to the Security Update Guide; known issues from our update issues – click a KB to see all its entries.
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5044277 | Windows | 76 | none known |
| KB5044288 | Windows | 76 | none known |
| KB5044281 | Windows | 64 | none known |
| KB5044285 | Windows | 61 | none known |
| KB5044280 | Windows | 60 | none known |
| KB5044273 | Windows | 55 | none known |
| KB5044284 | Windows | 32 | none known |
| KB5044293 | Windows | 24 | none known |
| KB5044320 | Windows | 17 | none known |
| KB5044306 | Windows | 17 | none known |
| KB5045993 | Developer tools (.NET, Visual Studio …) | 4 | none known |
| KB5044343 | Windows | 4 | none known |
Show 30 more updates
| Update | Product family | Vulnerabilities | Known issues |
|---|---|---|---|
| KB5044342 | Windows | 3 | none known |
| KB5045998 | Developer tools (.NET, Visual Studio …) | 3 | none known |
| KB5046615 | Windows | 3 | none known |
| KB5046616 | Windows | 3 | none known |
| KB5046698 | Windows | 3 | none known |
| KB5046613 | Windows | 3 | none known |
| KB5046633 | Windows | 3 | none known |
| KB5002645 | Microsoft Office | 1 | none known |
| KB5002647 | Microsoft Office | 1 | none known |
| KB5002649 | Microsoft Office | 1 | none known |
| KB5002643 | Microsoft Office | 1 | none known |
| KB5046399 | Windows | 1 | none known |
| KB5046398 | Windows | 1 | none known |
| KB5046400 | Windows | 1 | none known |
| KB5002635 | Microsoft Office | 1 | none known |
| KB5044356 | Windows | 1 | none known |
| KB5044321 | Windows | 1 | none known |
| KB5044021 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5044095 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5044085 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5044096 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5044089 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5044091 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5044092 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5045536 | Developer tools (.NET, Visual Studio …) | 1 | none known |
| KB5048661 | Windows | 1 | none known |
| KB5048654 | Windows | 1 | none known |
| KB5048800 | Windows | 1 | none known |
| KB5048652 | Windows | 1 | none known |
| KB5048695 | Windows | 1 | none known |
Known issues with the updates
No issues are known so far with the updates of this month.
By product family
More about this month
Where the information comes from
Fixed vulnerabilities, severity, zero-days and KB numbers come from the official Microsoft Security Update Guide (MSRC); known issues, workarounds and dated changes from our update issues, each with its source. “What to do now” is derived from this data using fixed rules, without AI.
Affected? We can help.
We check whether your systems are affected, apply workarounds properly and plan for dated changes in good time.