Microsoft patches 149 flaws in Windows update, fixes 2 active zero-days
- Microsoft released April 2024 Windows patch fixing 149 flaws, including 2 zero-days
- Zero-days are exploits actively used in the wild before being publicly known
- First zero-day allows proxy driver spoofing and backdoor network traffic control
- Second zero-day bypasses SmartScreen prompts to trick users into opening malware
- Patch fixes other flaws like Azure Kubernetes credential theft vulnerability