Microsoft Patch April 2024 Tuesday fixes 150 security flaws

Microsoft released a patch on Tuesday, April 2024. It includes security updates for 150 flaws and 67 remote code execution bugs.

Only three important vulnerabilities were fixed by Patch Tuesday. However, there are more than sixty-seven remote code execution bugs. The majority of these bugs are located in Microsoft SQL drivers and possibly share a common flaw.

• Alert

CVSS 10.0 Flaw
Critical flaw in Siemens OZW Web Servers Enable Unauthenticated RCE

By infosecbulletin / Wednesday , May 14 2025

Siemens issued a security advisory (SSA-047424) for two serious vulnerabilities—CVE-2025-26389 and CVE-2025-26390—impacting the OZW672 and OZW772 web servers. These servers...

Read More

• Alert

Microsoft Patch Tuesday May 2025: 72 flaws, 5 Actively Exploited Zero-Day

By infosecbulletin / Wednesday , May 14 2025

Microsoft has released its Patch Tuesday updates for May 2025, addressing a total of 78 vulnerabilities across its product ecosystem,...

Read More

• National

OTP glitch disrupted NID services across the country

By infosecbulletin / Tuesday , May 13 2025

NID services in Bangladesh are temporarily suspended due to issues with delivering One-Time Passwords (OTP) needed to access the NID...

Read More

• International

Google to pay Texas $1.4 billion for location tracking practices

By infosecbulletin / Monday , May 12 2025

Google will pay about $1.4 billion to Texas to settle two lawsuits regarding location tracking and biometric data storage without...

Read More

• International

YouTube geo-blocks at least 4 Bangladeshi TV channels in India

By infosecbulletin / Friday , May 9 2025

YouTube has restricted access to at least four Bangladeshi television channels in India following a takedown request from the Indian...

Read More

• Alert

Microsoft Patches Four Critical Azure and Power Apps Vulns

By infosecbulletin / Friday , May 9 2025

Microsoft has fixed critical vulnerabilities in its core cloud services, including Azure Automation, Azure Storage, Azure DevOps, and Microsoft Power...

Read More

• Uncategorized

Qilin Ransomware topped April 2025 with 45+ data leak disclosures

By infosecbulletin / Thursday , May 8 2025

The cyber threat landscape is rapidly changing, with a notable increase in ransomware activity in April 2025, driven by the...

Read More

• Alert
• Vulnerabilities

SonicWall Patches 3 Flaws in SMA 100 Devices

By infosecbulletin / Thursday , May 8 2025

SonicWall has released patches for three security flaws in SMA 100 Secure Mobile Access appliances that could allow remote code...

Read More

• Cyber Attack
• Ransomware

Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed

By infosecbulletin / Thursday , May 8 2025

From April 2024 to April 2025, Flashpoint analysts noted that the financial sector was a major target for threat actors,...

Read More

• Alert
• Vulnerabilities

Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA

By infosecbulletin / Thursday , May 8 2025

Cisco has issued a security advisory for a critical vulnerability in its IOS XE Software for Wireless LAN Controllers (WLCs)....

Read More

The number of bugs in each vulnerability category is listed below:

31 Elevation of Privilege Vulnerabilities
29 Security Feature Bypass Vulnerabilities
67 Remote Code Execution Vulnerabilities
13 Information Disclosure Vulnerabilities
7 Denial of Service Vulnerabilities
3 Spoofing Vulnerabilities

The count of flaws is 150, but it doesn’t include 5 flaws in Microsoft Edge that were fixed on April 4th, or 2 flaws in Mariner. Mariner is a Linux distribution by Microsoft forThere are 150 flaws, excluding 5 Microsoft Edge flaws fixed on April 4th and 2 Mariner flaws. Mariner is a Linux distribution developed by Microsoft for Azure services.

The April 2024 Patch Tuesday Security Updates:
Here are the resolved vulnerabilities for the April 2024 Patch Tuesday updates click here to see the full lists.