In recent days, Microsoft has released a total of 118 vulnerabilities, including 5 considered Zero-Days: CVE-2024-42827, CVE-2024-42317, CVE-2024-43205, CVE-2024-43341, and CVE-2024-43292, which are reported to be actively exploited. These vulnerabilities affect several products such as Microsoft Exchange Server, Microsoft Office, and Windows Kernel.
Of the vulnerabilities published by Microsoft in its Monthly Patch Tuesday (Microsoft October 2024 Patch Tuesday fixes), 10 were classified as critical, several of them related to remote code execution (RCE).
You can consult the full list of CVEs published by Microsoft at the following link:
https://msrc.microsoft.com/update-guide/releaseNote/2024-Oct
We recommend applying the necessary updates as soon as possible to mitigate the risks associated with these vulnerabilities, especially those that are actively being exploited.