bleepingcomputer[.]com/news/microsoft/microsoft-april-2024-patch-tuesday-fixes-150-security-flaws-67-rces/
bleepingcomputer[.]com/news/microsoft/windows-11-kb5036893-update-released-with-29-changes-moment-5-features/
bleepingcomputer[.]com/news/microsoft/windows-10-kb5036892-update-released-with-23-new-fixes-changes/
neowin[.]net/news/windows-11-kb5036893-windows-10-kb5036892-cause-slow-pcs-0x8007000d-0x800705b9-errors/
With this update the Win11 Moment 5 features are generally available. I didn't experience any problems, but Neowin reports several potential issues for Win11, while complaints say the update for Win10 just will not install. Win11 issues reported include not installing, drop in performance, Outlook 365 won't start, Edge won't uninstall in EU, VPNs with TPM backed certificates won't work.
Update 4/9/24: Added information on two zero-day vulnerabilities that Microsoft did not initially mark as exploited.Today is Microsoft's April 2024 Patch Tuesday, which includes security updates for 150 flaws and sixty-seven remote code execution bugs.
Only three critical vulnerabilities were fixed as part of today's Patch Tuesday, but there are over sixty-seven remote code execution bugs. More than half of the RCE flaws are found within Microsoft SQL drivers, likely sharing a common flaw.
There were also fixes for twenty-six Secure Boot bypasses released this month, including two from Lenovo.
The number of bugs in each vulnerability category is listed below:
31 Elevation of Privilege Vulnerabilities
29 Security Feature Bypass Vulnerabilities
67 Remote Code Execution Vulnerabilities
13 Information Disclosure Vulnerabilities
7 Denial of Service Vulnerabilities
3 Spoofing VulnerabilitiesThe total count of 150 flaws does not include 5 Microsoft Edge flaws fixed on April 4th and 2 Mariner flaws. Mariner is an open-source Linux distribution developed by Microsoft for its Microsoft Azure services.