Hyper-V zero-day stands out on a busy Patch Tuesday | Computer Weekly
Summary
Ultimately, it takes advantage of an integer overflow issue within Hyper-V. “CVE-2024-38080 … highlights a clear avenue for attackers to gain elevated privileges, jeopardising the confidentiality, integrity, and availability of multiple virtualised systems,” said Walters. Reeves said that without more details from Microsoft or the original reporter – a Check Point researcher – it was hard to give specific guidance on next steps, but that given it affects all hosts from Windows Server 2008 R2 and beyond – including clients – and is seeing active exploitation, it should be prioritised for patching without delay. The distance with which Wi-Fi signals can be detected, intercepted, and broadcasted is commonly underestimated, further heightening the risk of this vulnerability,” said Ryan Braunstein, Automox security operations team lead. “Educating all employees, friends, and family members about the importance of keeping devices patched and updated may not make you popular at parties, but can definitely reduce the 2am phone calls,” added Braunstein. • January 2024: Microsoft starts 2024 right with another slimline Patch Tuesday drop, but there are some critical vulns to be alert to, including a number of man-in-the-middle attack vectors.