Since clients need to know what the exact root cause in this case is, and they doubt that it does not fully relate to the broken networking caused by the security patches, otherwise jsreport should not receive any requests in the connection failure, so there may have some defeats in jsreport.
We could provide the information of the patches for testing, please feedback with some insights that what may possibly affect jsreport. Thank you.
CVE-2024-43572 - Microsoft Management Console Remote Code Execution Vulnerability
CVE-2024-43573 - Windows MSHTML Platform Spoofing Vulnerability
CVE-2024-43583 - Winlogon Elevation of Privilege Vulnerability
CVE-2024-20659 - Windows Hyper-V Security Feature Bypass Vulnerability
CVE-2024-43468 - Microsoft Configuration Manager Remote Code Execution Vulnerability
Microsoft's October 2024 Patch Tuesday, which includes security updates for 118 flaws, including five publicly disclosed zero-days, two of which are actively exploited.
This Patch Tuesday fixed three critical vulnerabilities, all remote code execution flaws.
The number of bugs in each vulnerability category is listed below:
• 28 Elevation of Privilege vulnerabilities
• 7 Security Feature Bypass vulnerabilities
• 43 Remote Code Execution vulnerabilities
• 6 Information Disclosure vulnerabilities
• 26 Denial of Service vulnerabilities
• 7 Spoofing vulnerabilities
CVE-2025-21333, CVE-2025-21334, CVE-2025-21335 - Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVE-2025-21298 - Windows OLE Remote Code Execution Vulnerability
CVE-2025-21354, CVE-2025-21362 - Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21309, CVE-2025-21297 - Windows Remote Desktop Services Remote Code Execution Vulnerability
CVE-2025-21296 - BranchCache Remote Code Execution Vulnerability
CVE-2025-21365 – Microsoft Office Remote Code Execution Vulnerability
Today is Microsoft's January 2025 Patch Tuesday, which includes security updates for 159 flaws, including eight zero-day vulnerabilities, with three actively exploited in attacks.
This Patch Tuesday also fixes twelve "Critical" vulnerabilities, including information disclosure, privileges elevation, and remote code execution flaws.
The number of bugs in each vulnerability category is listed below:
• 40 Elevation of Privilege Vulnerabilities
• 14 Security Feature Bypass Vulnerabilities
• 58 Remote Code Execution Vulnerabilities
• 24 Information Disclosure Vulnerabilities
• 20 Denial of Service Vulnerabilities
• 5 Spoofing Vulnerabilities