Alert GCSA-24068 - Microsoft Monthly Security Update - maggio 2024

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

******************************************************************

   alert ID: GCSA-24068
       data: 15 maggio 2024
     titolo: Microsoft Monthly Security Update - maggio 2024

******************************************************************

:: Descrizione del problema

   Microsoft ha pubblicato il security update per il mese di maggio 2024,
   con questa release vengono risolte oltre 60 vulnerabilita',
   delle quali una di livello critico:

   CVE-2024-30044 Microsoft SharePoint Server Remote Code Execution Vulnerability
   https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-30044

   Microsoft comunica inoltre che due vulnerabilita' risultano in corso di sfruttamento

   CVE-2024-30040 Windows MSHTML Platform Security Feature Bypass Vulnerability
   https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-30040

   CVE-2024-30051 Windows DWM Core Library Elevation of Privilege Vulnerability
   https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-30051

   Maggiori dettagli sono disponibili alla sezione "Riferimenti".


:: Software / Tecnologie interessate

   Windows
   Microsoft Edge (Chromium-based)
   Microsoft Office
   Microsoft Dynamics 365 Customer Insights
   Microsoft Bing
   Microsoft Intune
   Microsoft WDAC OLE DB provider for SQL
   Developer Tools (.NET and Visual Studio)
   Azure Migrate
   Power BI


:: Impatto

   Denial of Service (DoS)
   Acquisizione di privilegi piu' elevati (EoP)
   Esecuzione remota di codice arbitrario (RCE)
   Bypass delle funzionalita' di sicurezza (SFB)
   Rivelazione di informazioni (ID)
   Provide Misleading Information (spoofing)


:: Soluzioni

   In Windows per default gli aggiornamenti
   avvengono in maniera automatica.

   Per verificare manualmente la disponibilita' di aggiornamenti scegliere
   Start > Impostazioni > Aggiornamento e Sicurezza > Windows Update

   Verificare di aver installato la versione piu' recente del

   Servicing Stack Updates
   https://msrc.microsoft.com/update-guide/vulnerability/ADV990001
   https://docs.microsoft.com/it-it/windows/deployment/update/servicing-stack-updates

   MSRC Security Update Guide
   https://msrc.microsoft.com/update-guide/deployments

   Windows Update domande frequenti
   https://support.microsoft.com/en-us/help/12373/windows-update-faq

   Gli aggiornamenti sono disponibili anche tramite WSUS ed il
   catalogo di Microsoft Update
   https://www.catalog.update.microsoft.com/


:: Riferimenti

   Microsoft Security Updates - Release Notes
   https://msrc.microsoft.com/update-guide/releaseNote/2024-May
   https://msrc.microsoft.com/update-guide

   Microsoft Security Update Guidance
   https://portal.msrc.microsoft.com/en-us/security-guidance

   BleepingComputer
   https://www.bleepingcomputer.com/news/microsoft/microsoft-may-2024-patch-tuesday-fixes-3-zero-days-61-flaws/
   https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-zero-day-exploited-in-qakbot-malware-attacks/
   https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-vpn-failures-caused-by-april-windows-updates/

   Krebs on Security
   https://krebsonsecurity.com/2024/05/patch-tuesday-may-2024-edition/

   SANS Internet Storm Center
   https://isc.sans.edu/diary/rss/30920

   SecurityWeek
   https://www.securityweek.com/microsoft-patches-60-windows-vulns-warns-of-active-zero-day-exploitation/

   Kaspersky - QakBot attacks with Windows zero-day (CVE-2024-30051)
   https://securelist.com/cve-2024-30051/112618/

   The Hacker News
   https://thehackernews.com/2024/05/microsoft-patches-61-flaws-including.html

   Mitre CVE
   I riferimenti CVE sono disponibili nell'advisory originale.


GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----

iGsEAREIACsWIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCZkR/jg0cY2VydEBnYXJy
Lml0AAoJEMGcTJNlEmBC/DsAoIoWs26w+BToHCck35ksv9hs/8WiAJ0XbJ3WVtJ+
E43hG14Ftf6ansO/EA==
=ec7s
-----END PGP SIGNATURE-----