Today is Microsoft' 2024 Patch Tuesday, which includes security updates for 118 flaws, including five publicly disclosed zero-days, two of which are actively exploited.

Microsoft's updates for this month affect Windows, SQL Server, Microsoft Excel and Visual Studio and will require a significant amount of testing.

Microsoft has delivered 117 patches – two of which are for vulnerabilities under active exploitation – and plenty of others that are sufficiently serious that they deserve your rapid attention.

Patch Tuesday update addresses five zero days, with eight other vulnerabilities likely to be exploited within weeks.

A second exploited zero-day, CVE-2024-43573, is a Windows MSHTML platform spoofing vulnerability, which enables threat actors to trick users into believing they are visiting a legitimate site in order to harvest information or inject malicious payloads.

Patch Tuesday updates for October 2024 manage to tackle many vulnerabilities affecting Microosft Office, and Microsoft Edge.

Microsoft's October 2024 Patch Tuesday addresses 118 vulnerabilities, two under active exploitation. Apply fixes now.