2024年3月14日星期四

Microsoft Monthly Security Update (March 2024)

Release Date: 13 Mar 2024

RISK: Medium Risk

TYPE: Operating Systems - Windows OS

TYPE: Windows OS

Microsoft has released monthly security update for their products:

 

Vulnerable ProductRisk LevelImpactsNotes
System CenterMedium Risk Medium RiskSecurity Restriction Bypass
Elevation of Privilege
Remote Code Execution
 
Developer ToolsMedium Risk Medium RiskDenial of Service
Elevation of Privilege
 
AppsMedium Risk Medium RiskRemote Code Execution
Elevation of Privilege
Information Disclosure
 
AzureMedium Risk Medium RiskElevation of Privilege
Spoofing
Remote Code Execution
 
Microsoft OfficeMedium Risk Medium RiskRemote Code Execution
Elevation of Privilege
Information Disclosure
 
WindowsMedium Risk Medium RiskRemote Code Execution
Denial of Service
Elevation of Privilege
Security Restriction Bypass
Information Disclosure
Data Manipulation
 
Extended Security Updates (ESU)Medium Risk Medium RiskRemote Code Execution
Elevation of Privilege
Denial of Service
Security Restriction Bypass
Information Disclosure
 
Exchange ServerMedium Risk Medium RiskRemote Code Execution 
SQL ServerMedium Risk Medium RiskRemote Code Execution 
Microsoft DynamicsLow Risk Low RiskSpoofing 

 

Number of 'Extremely High Risk' product(s): 0

Number of 'High Risk' product(s): 0

Number of 'Medium Risk' product(s): 9

Number of 'Low Risk' product(s): 1

Evaluation of overall 'Risk Level': Medium Risk


Impact

  • Remote Code Execution
  • Security Restriction Bypass
  • Elevation of Privilege
  • Denial of Service
  • Information Disclosure
  • Spoofing
  • Data Manipulation

System / Technologies affected

  • System Center
  • Developer Tools
  • Apps
  • Azure
  • Microsoft Office
  • Windows
  • Extended Security Updates (ESU)
  • Exchange Server
  • SQL Server
  • Microsoft Dynamics

Solutions

Before installation of the software, please visit the vendor web-site for more details.

  •  Apply fixes issued by the vendor.

Vulnerability Identifier

 

Source


Related Link

沒有留言:

發佈留言

思科產品多個漏洞

思科產品多個漏洞 發佈日期: 2025年05月09日 風險: 中度風險 類型: 保安軟件及應用設備 - 保安軟件及應用設備 於思科產品發現多個漏...