Microsoft Patch Tuesday Analysis - March 2024

What is Patch Tuesday

Patch Tuesday refers to regular, scheduled releases of software patches and updates by various technology companies, including Microsoft, Adobe, Oracle etc. It occurs on the second Tuesday of each month. During Patch Tuesday, Microsoft releases:

• Security Updates

• Bug Fixes

• Improvements in its products (Windows OS, MS Office, other supported MS applications)

Products

In the provided image below, we can see that the primary vulnerable products are Windows Kernel, Microsoft WDAC OLE DB provider for SQL, followed by Windows ODBC Driver.

Vulnerability Types

In the image below we can observe that the predominant vulnerability type for this month is Elevation of Privileges (24), trailed by Remote Code Execution (18) and Denial of Service (6) respectively.

The below heatmap depicts the distribution of various vulnerability types per MS product.

CVSSv3 Score Distribution

It becomes evident that a significant majority of vulnerabilities gravitates towards the range of 7 to 9. This cluster underscores the high to critical severity of these vulnerabilities.

Statistics about CVSSv3 score distribution:

• mean: ~7.5

• min: 4.3

• max: 9.8

• 25%: 7.0

• 50%: 7.8

• 75%: 8.8

• median: 7.8

PRIOn KB Prioritization Decision Engine

PRIOn KB prioritization decision engine provides sensible default prioritization for vulnerabilities, which can also be customized to align with your security policies and requirements. The below horizontal bar chart provides a visual presentation of the distribution of vulnerabilities analysed via the PRIOn KB decision engine. At a glance, it becomes evident that the majority of the vulnerabilities, comprising a substantial 73.3% (44) of the total, fail into the “Significant” risk priority level. The “Routine” priority level makes up 26.7% (16) of the horizontal bar chart. At the time of writing, no urgent or immediate vulnerabilities identified and scored.

In the table below, we have arranged all the examined CVEs by priority.

How PRIOn can help

PRIOn is an AI driven vulnerability prioritization technology. PRIOn is here to automatically prioritize vulnerabilities, public or private, that matter most across your entire environment. Contact us here for any inquiry/demo. We are here to assist you to transform your vulnerability management lifecycle.