The Microsoft April 2024 security updates have been released and consist of 147 new patches to Microsoft products. In addition, 8 third-party CVEs are documented, bringing the total number of CVEs reported to 155.
Of the Microsoft CVEs released, 3 are rated critical,142 are rated important and 2 are rated moderate in security. At the time of release, none of the CVEs are listed as being publicly known or under active attack.
The security updates apply to the following products, features and roles: Microsoft Windows and Windows Components; Office and Office Components; Azure; .NET Framework and Visual Studio; SQL Server; DNS Server; Windows Defender; Bitlocker; and Windows Secure Boot.
See the list of KBs at the bottom of the page at April 2024 Security Updates - Release Notes - Security Update Guide - Microsoft for information regarding known issues with the security updates as well as the CVEs with FAQs, Mitigations and/or Workarounds. For specific information on Windows 11, versions 23H2 and 22H2, see KB5036893. For Windows 10, Version 22H2 see KB5036892.
Recommended Reading: See Dustin Childs review and analysis in Zero Day Initiative -- The April 2024 Security Update Review.
Of the Microsoft CVEs released, 3 are rated critical,142 are rated important and 2 are rated moderate in security. At the time of release, none of the CVEs are listed as being publicly known or under active attack.
The security updates apply to the following products, features and roles: Microsoft Windows and Windows Components; Office and Office Components; Azure; .NET Framework and Visual Studio; SQL Server; DNS Server; Windows Defender; Bitlocker; and Windows Secure Boot.
See the list of KBs at the bottom of the page at April 2024 Security Updates - Release Notes - Security Update Guide - Microsoft for information regarding known issues with the security updates as well as the CVEs with FAQs, Mitigations and/or Workarounds. For specific information on Windows 11, versions 23H2 and 22H2, see KB5036893. For Windows 10, Version 22H2 see KB5036892.
Recommended Reading: See Dustin Childs review and analysis in Zero Day Initiative -- The April 2024 Security Update Review.