Microsoft Update Tuesday 2024 Agosto - Vulnerabilidades
VSA24-01060Desde el CSIRT de Gobierno informamos frecuentemente de vulnerabilidades importantes que pueden afectar sus aplicaciones, datos o equipos.
En esta ocasión compartimos la información publicada por Microsoft como parte de su paquete de parches Update Tuesday de agosto de 2024. Se trata de parches para 89 vulnerabilidades, incluyendo 9 de día cero.
Vulnerabilidades
Versiones Afectadas
| Producto | Versiones |
|---|---|
| Windows Transport Security Layer (TLS) |
|
| Windows Kernel |
|
| Windows DWM Core Library |
|
| Windows Secure Kernel Mode |
|
| Windows NTFS |
|
| Windows Mobile Broadband |
|
| Windows TCP/IP |
|
| Microsoft Office Outlook |
|
| Windows Deployment Services |
|
| Microsoft Dynamics |
|
| Microsoft Streaming Service |
|
| Microsoft Edge (Chromium-based) |
|
| Windows NT OS Kernel |
|
| Servicing Stack Updates |
|
| Windows Power Dependency Coordinator |
|
| Windows Common Log File System Driver |
|
| Windows SmartScreen |
|
| Microsoft Teams |
|
| Windows Compressed Folder |
|
| Windows Kernel-Mode Drivers |
|
| Microsoft Office |
|
| Azure Stack |
|
| Microsoft Office Project |
|
| Windows Update Stack |
|
| Microsoft Local Security Authority Server (lsasrv) |
|
| Microsoft Windows DNS |
|
| Azure CycleCloud |
|
| Microsoft Office Visio |
|
| .NET and Visual Studio |
|
| Line Printer Daemon Service (LPD) |
|
| Visual Studio |
|
| Microsoft Office Excel |
|
| Windows WLAN Auto Config Service |
|
| Windows Security Center |
|
| Windows Network Virtualization |
|
| Reliable Multicast Transport Driver (RMCAST) |
|
| Windows Layer-2 Bridge Network Driver |
|
| Windows Cloud Files Mini Filter Driver |
|
| Azure IoT SDK |
|
| Windows Routing and Remote Access Service (RRAS) |
|
| Windows App Installer |
|
| Windows Resource Manager |
|
| Windows Clipboard Virtual Channel Extension |
|
| Windows Kerberos |
|
| Microsoft Bluetooth Driver |
|
| Windows Secure Boot |
|
| Microsoft Office PowerPoint |
|
| Windows Print Spooler Components |
|
| Windows Mark of the Web (MOTW) |
|
| Windows Network Address Translation (NAT) |
|
| Windows Initial Machine Configuration |
|
| Windows Ancillary Function Driver for WinSock |
|
| Azure Health Bot |
|
| Microsoft WDAC OLE DB provider for SQL |
|
| Windows Scripting |
|
| Windows IP Routing Management Snapin |
|
| Azure Connected Machine Agent |
|
Mitigación
Información sobre parches: https://msrc.microsoft.com/update-guide/releaseNote/2024-Aug