On Patch Tuesday, Windows systems will be updated with a flood of security fixes. In November, Windows patched four zero-day vulnerabilities, two of which have been exploited.

The other two zero days being patched are CVE-2024-49040, a flaw in Exchange rated “important” that could allow an attacker to spoof the email address of a sender, and CVE-2024-49019, an elevation of privileges flaw in Active Directory (AD) which an attacker could use to gain the powers of a domain admin.

Patch Tuesday Patch Tuesday has swung around again, and Microsoft has released fixes for 89 CVE-listed security flaws in its products – including two under active attack – and reissued three more.

The Patch Tuesday updates for November 2024 are here and you should get them as soon as possible otherwise your PC might be in danger.

The November 2024 Patch Tuesday updates for Windows 11 versions 24H2 and 23H2 make it possible to use the Copilot key on PCs that have one to open other apps.

Adobe patches critical-severity bugs in multiple products, including the Adobe Commerce and Magento Open Source platforms.

It’s been another busy Patch Tuesday for system administrators, with Microsoft releasing updates for nearly 100 vulnerabilities, four of which are classed as zero-days. Microsoft classifies a zero-day flaw as a CVE that has been publicly disclosed or actively exploited before a patch is available.

High-profile vulns in NTLM, Windows Task Scheduler, Active Directory Certificate Services and Microsoft Exchange Server should be prioritised from November’s Patch Tuesday update

These updates will be rolled out to all supported Windows 10 and Windows 11 PCs over the coming days. Apple is the last one to show up to the AI party, but how does its Clean Up tool compare to Samsung's Object Eraser?