This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Microsoft Patch Tuesday, critical vulnerability in MSMQ

As part of its Patch Tuesday, Microsoft released patches for 51 vulnerabilities [1]. Among them is one critical remote code execution (RCE) vulnerability. Seven browser vulnerabilities were published separately this month and are not included in the total [2]. An overview of all vulnerabilities can be found in the SANS table [3].

MSMQ - RCE (CVE-2024-30080)
CVSS 9.8 (Critical)

An unauthenticated remote attacker can, by sending a specially crafted malicious packet to an MSMQ server, exploit a use-after-free flaw in the HTTP processing function for MSMQ messages and execute arbitrary code [2].

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 11. 6. 2024.

Outlook - RCE (CVE-2024-30103)
CVSS 8.8 (High)

An authenticated remote attacker can, via the Preview Pane in Outlook, bypass Outlook registry block lists, create malicious DLL (Dynamic Link Library) files and carry out an RCE attack if authenticated with valid Microsoft Exchange user credentials [4].

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 11. 6. 2024.

Azure - DoS (CVE-2024-35254)
CVSS 7.1 (High)

An authenticated local attacker with read permission can elevate their privileges and perform arbitrary deletion of files and folders on the host where Azure Monitor Agent is installed. Although this vulnerability does not disclose confidential information, it may allow the attacker to delete data, which could lead to a denial of service [4].

CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

More information:

The vulnerability was publicly disclosed 11. 6. 2024.

Windows OLE - RCE (CVE-2024-30077)
CVSS 8.0 (High)

An authenticated remote attacker can execute arbitrary code in Microsoft OLE (Object Linking and Embedding) if they trick an authenticated user into attempting to connect to a malicious SQL server database using an OLE DB or OLEDB connection driver [4].

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 11. 6. 2024.

Windows kernel - privilege escalation (CVE-2024-30068)
CVSS 8.8 (High)

An authenticated local attacker can, using a specially crafted malicious application, elevate their privileges to SYSTEM level, execute code or access resources at a higher integrity level [4].

CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 11. 6. 2024.

By CESNET, z.s.p.o. Michaela Jarošová on 17. 6. 2024.

CESNET, z.s.p.o. Logo