# Microsoft Patch Tuesday February 2024 includes actively exploited flaws

Published: 2024-02-18 · Severity: high · Sectors: government-national, defense, financial-services, healthcare, technology, education, manufacturing, energy, telecommunications, transportation, retail, infrastructure
Canonical: https://vorant.io/reports/c97617d5-c2e5-5357-a3c8-f0bcbae2c230/microsoft-patch-tuesday-february-2024-includes-actively-exploited-flaws

> Microsoft releases February 2024 security updates; four CVEs confirmed exploited in the wild, including critical issues requiring urgent patching.

On February 14, 2024, Microsoft released security patches addressing multiple vulnerabilities across its product line. The Japan Information-technology Promotion Agency (IPA) issued an alert identifying four vulnerabilities confirmed as actively exploited in the wild: CVE-2024-21351, CVE-2024-21412, CVE-2024-21410, and CVE-2024-21338. These flaws carry significant risk, allowing attackers to achieve remote code execution, application crashes, and full system compromise. IPA advised immediate application of the February 2024 security updates to all affected systems, particularly for organizations that had not yet deployed the patches. The advisory was updated twice—on February 19 and March 5, 2024—to add newly confirmed in-the-wild exploitation of additional CVEs.

## Mentioned in this report

- Vulnerabilities: CVE-2024-21338 (KEV), CVE-2024-21351 (KEV), CVE-2024-21410 (KEV), CVE-2024-21412 (KEV)

Source reporting: https://www.ipa.go.jp/archive/security/security-alert/2023/0214-ms.html

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/c97617d5-c2e5-5357-a3c8-f0bcbae2c230/microsoft-patch-tuesday-february-2024-includes-actively-exploited-flaws.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup