Microsoft: "we had one #PatchTuesday yes, but what about second Patch Tuesday?"
-
Microsoft: "we had one #PatchTuesday yes, but what about second Patch Tuesday?"
- CVE-2024-49053 (7.6 high) Microsoft Dynamics 365 Sales Spoofing Vulnerability
- CVE-2024-49035 (8.7 high) Partner.Microsoft.Com Elevation of Privilege Vulnerability (EXPLOITATION DETECTED
) - CVE-2024-49038 (9.3 critical) Microsoft Copilot Studio Elevation Of Privilege Vulnerability
- CVE-2024-49052 (8.2 high) Microsoft Azure PolicyWatch Elevation of Privilege Vulnerability
Only CVE-2024-49053 has any substantial information in their FAQ section. CVE-2024-49035 is "not exploited" but "exploitation detected"
(analyst comment: likely a gaffe). The rest are Not Exploited, Not Publicly Disclosed, and Exploitation Less Likely.#microsoft #vulnerability #CVE #infosec #cybersecurity #copilot #dynamics365 #azure
-
Microsoft updated CVE-2024-49035 (8.7 high) Partner.Microsoft.Com Elevation of Privilege Vulnerability to an EXPLOITED ZERO-DAY! 🥳
Happy Thanksgiving 
@cR0w! @t0db @ntkramer @dreadpir8robots @briankrebs @campuscodi Microsoft messed up again and had to correct their advisory. They had an "Exploitation Detected" flag but not an "Exploited" flag when this CVE was first announced.
Now I know that Eduard Kovacs reads my toots
. See Security Week article Microsoft Patches Exploited Vulnerability in Partner Network Website#microsoft #vulnerability #CVE #infosec #cybersecurity #copilot #dynamics365 #azure #zeroday #eitw #activeexploitation #CVE_2024_49035
