Patch Tuesday
CVE-2024-38063 lets unauthenticated attackers carry out remote code execution by "repeatedly sending IPv6 packets".
The bugs include four publicly known flaws and six that have been exploited in the wild.
God speed to those pushing fixes.
As a major Exchange Service update lands, Redmond admits "it is possible that some functionality may break after installing CU14..."
One vulnerability bears a striking resemblance to an 0day that was actively exploited in the wild in November 2023.
A CVSS 9,8 bug that lets attackers spoof legitimate connectors between Microsoft/Azure services is the pick of the bunch...
"Loaded by default on just about every version of Windows, so it provides a broad attack surface"
A CVSS 9.8, pre-auth RCE that lets an attacker execute arbitrary code without user interaction is wormable on systems where Message Queuing is enabled.