Microsoft's November 2024 Updates Address Critical Zero-Day Exploits

Microsoft has released patches for over 90 vulnerabilities, including two critical zero-day exploits in the Windows Task Scheduler and NTLMv2 hash disclosure. The Task Scheduler flaw, CVE-2024-49039, allows privilege escalation and has a CVSS score of 8.8, while the NTLMv2 issue, CVE-2024-43451, can be triggered with minimal user interaction. Additionally, critical vulnerabilities in .NET, Visual Studio, and Windows Kerberos were addressed, with some carrying a CVSS score of 9.8. These updates coincide with Adobe's security fixes for critical flaws in its software products.