Microsoft Urges Immediate Updates to Fix Critical Windows Vulnerabilities
Microsoft has confirmed a zero-day vulnerability, CVE-2024-49138, affecting all Windows OS editions back to Server 2008, which is actively being exploited. The U.S. Cybersecurity and Infrastructure Security Agency has added it to the Known Exploited Vulnerability Catalog, urging immediate updates due to significant risks. The vulnerability is a heap-based buffer overflow in the Windows Common Log File System driver, with a CVSSv3.1 score of 7.8, making it a critical priority for users to patch their systems.