It's May 2024 Patch Tuesday! Microsoft has released today security updates for all supported versions of Windows, including the brand new Windows 11, version 23H2!
If you’re already running Windows 11, version 22H2 on your PC, you should now be seeing the KB5037771 patch waiting for you in Windows Update. The update arrives with security updates and quality improvements!
SECURITY UPDATE GUIDE:
Highlights
This update addresses a known issue that might cause your VPN connection to fail. This occurs after you install the update dated April 9, 2024, or later.
Improvements
This security update includes improvements that were a part of update KB5036980 (released April 23, 2024). When you install this KB:
● This update addresses an issue that might affect domain controllers (DC). NTLM authentication traffic might increase.
● This update addresses an issue that might affect Virtual Secure Mode (VSM) scenarios. They might fail. These scenarios include VPN, Windows Hello, Credential Guard, and Key Guard.
● This update addresses an issue that affects Server Message Block (SMB) clients. They fail to make SMB Multichannel connections. Because of this, file transfers are slow. This issue occurs after you install KB5036980 (April 23, 2024). In the Windows Event Log, Event ID 30826 appears for Microsoft-Windows-SMBClient/Connectivity.
SECURITY AT THE TOP!
Today is Microsoft's May 2024 Patch Tuesday, which includes security updates for 61 flaws and three actively exploited or publicly disclosed zero days.
This Patch Tuesday only fixes one critical vulnerability, a Microsoft SharePoint Server Remote Code Execution Vulnerability.
The number of bugs in each vulnerability category is listed below:
17 Elevation of Privilege Vulnerabilities
2 Security Feature Bypass Vulnerabilities
27 Remote Code Execution Vulnerabilities
7 Information Disclosure Vulnerabilities
3 Denial of Service Vulnerabilities
4 Spoofing Vulnerabilities
The total count of 61 flaws does not include 2 Microsoft Edge flaws fixed on May 2nd and four fixed on May 10th.
To learn more about the non-security updates released today, you can review our dedicated articles on the new Windows 11 KB5037771 cumulative update and the Windows 10 KB5037768 update.
Three zero-days fixed
This month's Patch Tuesday fixes two actively exploited and one publicly disclosed zero-day vulnerabilities.
Microsoft classifies a zero-day as a flaw publicly disclosed or actively exploited with no official fix available.
SOURCE:
There are also some known issues to be aware of!
DOWNLOAD THE UPDATE MANUALLY:
MORE INFORMATION & RESOURCES: