Microsoft fixes major security flaws with June 2024 update – Times of India

Microsoft has released the June 2024 security update that addresses 51 vulnerabilities, eighteen remote code execution flaws, and one publicly disclosed zero-day vulnerability across its products. These vulnerabilities could potentially be exploited by cyber threat actors to gain control of the affected system.
Of these 51 vulnerabilities, 1 is marked as ‘critical’ and the remaining 50 are rated ‘important’.Earlier this month, Microsoft released a fix for 17 security flaws in the Chromium-based Edge browser.

Microsoft fixes 51 flaws in 4 vulnerability category

Number of bugs in each category is listed below:

One publicly-disclosed zero-day vulnerability

As mentioned above, the security update addressed one zero-day vulnerability that was listed as publicly known at the time of the release. It includes a denial-of-service issue marked as CVE-2023-50868 (CVSS score: 7.5), impacting the DNSSEC validation process that could cause CPU exhaustion on a DNSSEC-validating resolver.
Microsoft defines a zero-day vulnerability as a flaw that is exploited in the wild with no official fix.

CERT-In advisory on Microsoft Edge

Earlier this week, the Indian government ‘warned’ users of multiple vulnerabilities in Microsoft Edge (Chromium-based), asking users of the web browser to install the latest update available to them. The Indian Computer Emergency Response Team (CERT-In) said that these vulnerabilities exist in Microsoft Edge (Chromium-based) due to ‘out of bounds’ memory access in keyboard inputs; out of bounds write in streams API; heap buffer overflow in WebRTC, use after free in dawn, media session and presentation AP.