In recent days, Microsoft has published a total of 118 vulnerabilities, including 5 considered Zero-Days: CVE-2024-42827, CVE-2024-42317, CVE-2024-43205, CVE-2024-43341 and CVE-2024-43292, which are reported to be actively exploited. These vulnerabilities affect various products such as Microsoft Exchange Server, Microsoft Office, and Windows Kernel.

Of the vulnerabilities published by Microsoft in their Monthly Tuesday Patch (Microsoft October 2024 Patch Tuesday fixes), 10 were classified as critical, several of them remote code execution (RCE).

You can consult the complete list of CVEs published by Microsoft at the following link:
https://msrc.microsoft.com/update-guide/releaseNote/2024-Oct

We recommend applying the corresponding updates to mitigate the risks associated with these vulnerabilities as soon as possible, especially those that are being actively exploited.