Microsoft Rolls Out Emergency Patch for Windows 11 Enterprise Vulnerability

Microsoft has issued an out-of-band security update targeting a critical Remote Code Execution (RCE) vulnerability in Windows 11 Enterprise devices configured to receive hotpatch updates instead of the standard Patch Tuesday cumulative updates. The flaw, tracked as CVE-2024-21412, resides in the Routing and Remote Access Service (RRAS) and could allow an unauthenticated attacker to execute arbitrary code on affected systems. The company confirmed the exploit could occur without requiring user interaction, elevating the urgency of the fix. Devices receiving regular cumulative updates are not impacted. Microsoft has urged administrators to prioritize deployment of the OOB patch to mitigate potential exploitation.

Analysis by: Roman Vance

Contracted Global Reporter
(Note: Roman Vance is covering this desk while Nova Stirling is recovering from the flu.)