November Microsoft Patch Tuesday. 125 CVEs, 35 of which were added since October MSPT. 2 vulnerabilities with signs of exploitation in the wild:

Elevation of Privilege – Windows Task Scheduler (CVE-2024-49039)
Disclosure/Spoofing – NTLM Hash (CVE-2024-43451)

No signs of exploitation, but with a private PoC of the exploit:

Remote Code Execution – Microsoft Edge (CVE-2024-43595, CVE-2024-43596)
Authentication Bypass – Azure Functions (CVE-2024-38204)
Authentication Bypass – Microsoft Dataverse (CVE-2024-38139)
Spoofing – Microsoft Exchange (CVE-2024-49040)

Among the rest can be highlighted:

Remote Code Execution – Windows Kerberos (CVE-2024-43639)
Elevation of Privilege – Windows Win32k (CVE-2024-43636)
Elevation of Privilege – Windows DWM Core Library (CVE-2024-43629)
Elevation of Privilege – Windows NT OS Kernel (CVE-2024-43623)

Full Vulristics report

На русском

October Microsoft Patch Tuesday. 146 CVEs, of which 28 were added since September MSPT. 2 vulnerabilities with signs of exploitation in the wild:

Remote Code Execution – Microsoft Management Console (CVE-2024-43572)
Spoofing – Windows MSHTML Platform (CVE-2024-43573)

Without signs of exploitation in the wild, but with a public PoC exploit:

Remote Code Execution – Open Source Curl (CVE-2024-6197)

Private exploits exist for:

Information Disclosure – Microsoft Edge (CVE-2024-38222)
Security Feature Bypass – Windows Hyper-V (CVE-2024-20659)

Among the rest can be highlighted:

Remote Code Execution – Remote Desktop Protocol Server (CVE-2024-43582)
Remote Code Execution – Windows Remote Desktop Client (CVE-2024-43533, CVE-2024-43599)
Remote Code Execution – Windows Routing and Remote Access Service (RRAS) (CVE-2024-38212 and 11 more CVEs)

Full Vulristics report

На русском

September Microsoft Patch Tuesday. 107 CVEs, 28 of which were added since August MSPT. 6 vulnerabilities with signs of exploitation in the wild:

Remote Code Execution – Windows Update (CVE-2024-43491)
Elevation of Privilege – Windows Installer (CVE-2024-38014)
Security Feature Bypass – Windows Mark of the Web (CVE-2024-38217), Microsoft Publisher (CVE-2024-38226), Chromium (CVE-2024-7965)
Memory Corruption – Chromium (CVE-2024-7971)

3 more with private exploits:

Authentication Bypass – Azure (CVE-2024-38175)
Security Feature Bypass – Windows Mark of the Web (CVE-2024-43487)
Elevation of Privilege – Windows Storage (CVE-2024-38248)

Other interesting vulnerabilities:

Remote Code Execution – Microsoft SQL Server (CVE-2024-37335 and 5 more CVEs)
Remote Code Execution – Windows NAT (CVE-2024-38119)
Elevation of Privilege – Windows Win32k (CVE-2024-38246, CVE-2024-38252, CVE-2024-38253)

Full Vulristics report

На русском