Patch Tuesday Update - July 2024

Fortra VM will include the Microsoft Patch Tuesday checks in the NIRV 4.46.0 and FVM Agent 2.9 releases.
Microsoft addressed 142 vulnerabilities in this release, including 5 rated as critical, and 59 remote code execution vulnerabilities.

This release represents a huge increase in the number of CVEs, as opposed to last month’s count.

Notable Vulnerabilities from this patch Tuesday release:

CVE-2024-38080 – Windows Hyper-V Elevation of Privilege Vulnerability

This is a critical zero-day vulnerability identified in Microsoft’s Hyper-V. This flaw is classified as an Elevation of Privilege vulnerability with a CVSS rating of 7.8, indicating a significant threat to systems leveraging Hyper-V.

Technical Details: CVE-2024-38080 stems from an Integer Overflow within Hyper-V. Successful exploitation could result in arbitrary code execution with elevated privileges, granting SYSTEM-level access.

Attack Vector:  Local Access Required

Attack Sophistication:  Low Complexity

Privilege Level Required:  Minimal Privileges

Microsoft SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

This month, Microsoft has addressed 38 CVEs related to its SQL Server database products. While the specific CVEs are numerous, the patches target a common exploit scenario: an attacker could deceive an authenticated MS-SQL database user into connecting to a malicious MS-SQL server, resulting in the execution of arbitrary code on the client machine. This exploit necessitates that attackers set up a malicious database server, target a database admin, and successfully use social engineering tactics. It's crucial for users to update their SQL Server client software with the latest cumulative update to avoid falling victim to this exploit.

CVE-2024-38060 – Microsoft Windows Codecs Library Remote Code Execution Vulnerability

The TIFF image file format is the focus of this critical vulnerability. A specially-crafted, malicious TIFF file could cause a vulnerable server to execute embedded malicious code. It is essential to patch servers to eliminate this risk and protect against potential attacks.

CVE-2024-38032 – Microsoft Xbox Remote Code Execution Vulnerability

Xbox users with wireless adapters need to be wary of potential network threats. An attacker on the same local network could send a malicious packet to the Xbox, resulting in arbitrary command execution. To mitigate this risk, ensure network security and avoid allowing untrusted devices to connect to your WLAN.