Tripwire Patch Priority Index for June 2024

Tripwire’s June 2024 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft.

First on the list are patches for Microsoft Edge (Chromium-based) and Chromium that resolve use after free, heap buffer overflow, and out of bounds write vulnerabilities

Next on the patch priority list this month are patches for Microsoft Office and Outlook that resolve 4 remote code execution vulnerabilities.

Next are patches that affect components of the core Windows operating system. These patches resolve over 35 vulnerabilities, including elevation of privilege, information disclosure, security feature bypass, denial of service, and remote code execution vulnerabilities. These vulnerabilities affect core Windows, Kernel, Cryptographic Services, Themes, Winlogon, OLE, RRAS, Container Manager Service, Event Trace Log, and others.

Next up are patches for Visual Studio that resolve remote code execution, elevation of privilege, and Binary Hijack vulnerabilities.

Lastly, administrators should focus on server-side patches for Dynamics 365 and DHCP Server. These patches resolve numerous issues, including remote code execution, information disclosure, elevation of privilege, and denial of service vulnerabilities.