Patch days / April 2024

Microsoft Patch Tuesday — April 2024

Tuesday, 9 April 2024

Vulnerabilities: 147
Critical: 1
High: 111
Zero-days: 0
Public exploit: 6

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 8.8
CVE-2024-29988 Exploited Public exploit SmartScreen Prompt Security Feature Bypass Vulnerability
EPSS 45%

Critical 1

Critical 9.0
CVE-2024-29990 Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
EPSS 18%

Public exploit code 5

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.4
CVE-2024-29050 Public exploit Windows Cryptographic Services Remote Code Execution Vulnerability
EPSS 1.3%
High 7.8
CVE-2024-26218 Public exploit Windows Kernel Elevation of Privilege Vulnerability
EPSS 13%
High 7.8
CVE-2024-26229 Public exploit Windows CSC Service Elevation of Privilege Vulnerability
EPSS 9.4%
High 7.8
CVE-2024-26230 Public exploit Windows Telephony Server Elevation of Privilege Vulnerability
EPSS 24%
High 7.3
CVE-2024-21409 Public exploit .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
EPSS 2.5%

All vulnerabilities 147

Critical1 Show

Critical 9.0
CVE-2024-29990 Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
EPSS 18%

High111 Show

High 8.8
CVE-2024-29988 Exploited Public exploit SmartScreen Prompt Security Feature Bypass Vulnerability
EPSS 45%
High 8.8
CVE-2024-20678 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 2.5%
High 8.8
CVE-2024-21323 Microsoft Defender for IoT Remote Code Execution Vulnerability
EPSS 3.2%
High 8.8
CVE-2024-26179 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.8%
High 8.8
CVE-2024-26200 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.8%
High 8.8
CVE-2024-26205 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.8%
High 8.8
CVE-2024-26210 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
EPSS 2%
High 8.8
CVE-2024-26214 Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability
EPSS 2%
High 8.8
CVE-2024-26244 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
EPSS 2%
High 8.8
CVE-2024-28906 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-28908 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-28909 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-28910 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.8%
High 8.8
CVE-2024-28911 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.2%
High 8.8
CVE-2024-28912 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.3%
High 8.8
CVE-2024-28913 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.3%
High 8.8
CVE-2024-28914 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-28915 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.2%
High 8.8
CVE-2024-28926 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.3%
High 8.8
CVE-2024-28927 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-28929 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-28930 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-28931 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-28932 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-28933 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-28934 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-28935 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-28936 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-28937 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.3%
High 8.8
CVE-2024-28938 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.3%
High 8.8
CVE-2024-28939 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.3%
High 8.8
CVE-2024-28940 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-28941 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.3%
High 8.8
CVE-2024-28942 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-28943 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-28944 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-28945 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.3%
High 8.8
CVE-2024-29043 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-29044 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-29046 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-29047 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-29048 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-29053 Microsoft Defender for IoT Remote Code Execution Vulnerability
EPSS 3.2%
High 8.8
CVE-2024-29982 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-29983 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-29984 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-29985 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 2.4%
High 8.8
CVE-2024-29993 Azure CycleCloud Elevation of Privilege Vulnerability
EPSS 2%
High 8.4
CVE-2024-29050 Public exploit Windows Cryptographic Services Remote Code Execution Vulnerability
EPSS 1.3%
High 8.4
CVE-2024-29989 Azure Monitor Agent Elevation of Privilege Vulnerability
High 8.1
CVE-2024-20670 Outlook for Windows Spoofing Vulnerability
EPSS 2.3%
High 8.0
CVE-2024-26180 Secure Boot Security Feature Bypass Vulnerability
EPSS 1.5%
High 8.0
CVE-2024-26189 Secure Boot Security Feature Bypass Vulnerability
EPSS 1.4%
High 8.0
CVE-2024-26240 Secure Boot Security Feature Bypass Vulnerability
EPSS 1.1%
High 8.0
CVE-2024-28925 Secure Boot Security Feature Bypass Vulnerability
EPSS 1.2%
High 7.8
CVE-2024-26218 Public exploit Windows Kernel Elevation of Privilege Vulnerability
EPSS 13%
High 7.8
CVE-2024-26229 Public exploit Windows CSC Service Elevation of Privilege Vulnerability
EPSS 9.4%
High 7.8
CVE-2024-26230 Public exploit Windows Telephony Server Elevation of Privilege Vulnerability
EPSS 24%
High 7.8
CVE-2024-20693 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2024-21447 Windows Authentication Elevation of Privilege Vulnerability
EPSS 1.4%
High 7.8
CVE-2024-26158 Microsoft Install Service Elevation of Privilege Vulnerability
EPSS 12%
High 7.8
CVE-2024-26175 Secure Boot Security Feature Bypass Vulnerability
High 7.8
CVE-2024-26211 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
EPSS 4.1%
High 7.8
CVE-2024-26228 Windows Cryptographic Services Security Feature Bypass Vulnerability
High 7.8
CVE-2024-26235 Windows Update Stack Elevation of Privilege Vulnerability
High 7.8
CVE-2024-26237 Windows Defender Credential Guard Elevation of Privilege Vulnerability
High 7.8
CVE-2024-26239 Windows Telephony Server Elevation of Privilege Vulnerability
High 7.8
CVE-2024-26241 Win32k Elevation of Privilege Vulnerability
High 7.8
CVE-2024-26245 Windows SMB Elevation of Privilege Vulnerability
High 7.8
CVE-2024-26256 Libarchive Remote Code Execution Vulnerability
EPSS 88%
High 7.8
CVE-2024-26257 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2024-28904 Microsoft Brokering File System Elevation of Privilege Vulnerability
High 7.8
CVE-2024-28905 Microsoft Brokering File System Elevation of Privilege Vulnerability
High 7.8
CVE-2024-28907 Microsoft Brokering File System Elevation of Privilege Vulnerability
High 7.8
CVE-2024-28920 Secure Boot Security Feature Bypass Vulnerability
High 7.8
CVE-2024-29052 Windows Storage Elevation of Privilege Vulnerability
High 7.8
CVE-2024-29061 Secure Boot Security Feature Bypass Vulnerability
High 7.5
CVE-2024-26212 DHCP Server Service Denial of Service Vulnerability
EPSS 63%
High 7.5
CVE-2024-26215 DHCP Server Service Denial of Service Vulnerability
EPSS 2.7%
High 7.5
CVE-2024-26219 HTTP.sys Denial of Service Vulnerability
EPSS 3.1%
High 7.5
CVE-2024-26248 Windows Kerberos Elevation of Privilege Vulnerability
EPSS 1%
High 7.5
CVE-2024-26254 Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability
EPSS 3.1%
High 7.5
CVE-2024-28896 Secure Boot Security Feature Bypass Vulnerability
High 7.5
CVE-2024-29045 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 1.8%
High 7.4
CVE-2024-26194 Secure Boot Security Feature Bypass Vulnerability
High 7.3
CVE-2024-21409 Public exploit .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
EPSS 2.5%
High 7.3
CVE-2024-26216 Windows File Server Resource Management Service Elevation of Privilege Vulnerability
High 7.3
CVE-2024-26232 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
High 7.3
CVE-2024-29063 Azure AI Search Information Disclosure Vulnerability
High 7.2
CVE-2024-21322 Microsoft Defender for IoT Remote Code Execution Vulnerability
EPSS 3.1%
High 7.2
CVE-2024-21324 Microsoft Defender for IoT Elevation of Privilege Vulnerability
EPSS 2.3%
High 7.2
CVE-2024-26195 DHCP Server Service Remote Code Execution Vulnerability
EPSS 2.2%
High 7.2
CVE-2024-26202 DHCP Server Service Remote Code Execution Vulnerability
EPSS 2.2%
High 7.2
CVE-2024-26208 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
EPSS 2.3%
High 7.2
CVE-2024-26221 Windows DNS Server Remote Code Execution Vulnerability
EPSS 1.8%
High 7.2
CVE-2024-26222 Windows DNS Server Remote Code Execution Vulnerability
EPSS 1.8%
High 7.2
CVE-2024-26223 Windows DNS Server Remote Code Execution Vulnerability
EPSS 1.6%
High 7.2
CVE-2024-26224 Windows DNS Server Remote Code Execution Vulnerability
EPSS 1.6%
High 7.2
CVE-2024-26227 Windows DNS Server Remote Code Execution Vulnerability
EPSS 1.5%
High 7.2
CVE-2024-26231 Windows DNS Server Remote Code Execution Vulnerability
EPSS 1.5%
High 7.2
CVE-2024-26233 Windows DNS Server Remote Code Execution Vulnerability
EPSS 1.6%
High 7.2
CVE-2024-29054 Microsoft Defender for IoT Elevation of Privilege Vulnerability
EPSS 2.3%
High 7.2
CVE-2024-29055 Microsoft Defender for IoT Elevation of Privilege Vulnerability
EPSS 2.3%
High 7.2
CVE-2024-29066 Windows Distributed File System (DFS) Remote Code Execution Vulnerability
EPSS 1.3%
High 7.1
CVE-2024-20688 Secure Boot Security Feature Bypass Vulnerability
EPSS 1.3%
High 7.1
CVE-2024-20689 Secure Boot Security Feature Bypass Vulnerability
EPSS 1.3%
High 7.1
CVE-2024-29062 Secure Boot Security Feature Bypass Vulnerability
High 7.0
CVE-2024-26213 Microsoft Brokering File System Elevation of Privilege Vulnerability
High 7.0
CVE-2024-26236 Windows Update Stack Elevation of Privilege Vulnerability
High 7.0
CVE-2024-26242 Windows Telephony Server Elevation of Privilege Vulnerability
High 7.0
CVE-2024-26243 Windows USB Print Driver Elevation of Privilege Vulnerability

Medium35 Show

Medium 6.8
CVE-2024-26168 Secure Boot Security Feature Bypass Vulnerability
Medium 6.8
CVE-2024-26251 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 1.4%
Medium 6.8
CVE-2024-26252 Windows rndismp6.sys Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-26253 Windows rndismp6.sys Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-28897 Secure Boot Security Feature Bypass Vulnerability
Medium 6.7
CVE-2024-20669 Secure Boot Security Feature Bypass Vulnerability
Medium 6.7
CVE-2024-26171 Secure Boot Security Feature Bypass Vulnerability
Medium 6.7
CVE-2024-26234 Proxy Driver Spoofing Vulnerability
EPSS 4.9%
Medium 6.7
CVE-2024-26250 Secure Boot Security Feature Bypass Vulnerability
Medium 6.7
CVE-2024-28903 Secure Boot Security Feature Bypass Vulnerability
Medium 6.7
CVE-2024-28919 Secure Boot Security Feature Bypass Vulnerability
Medium 6.7
CVE-2024-28921 Secure Boot Security Feature Bypass Vulnerability
Medium 6.7
CVE-2024-28924 Secure Boot Security Feature Bypass Vulnerability
Medium 6.5
CVE-2024-21424 Azure Compute Gallery Elevation of Privilege Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2024-26183 Windows Kerberos Denial of Service Vulnerability
EPSS 2.2%
Medium 6.5
CVE-2024-26226 Windows Distributed File System (DFS) Information Disclosure Vulnerability
EPSS 1.8%
Medium 6.4
CVE-2024-26193 Azure Migrate Remote Code Execution Vulnerability
Medium 6.4
CVE-2024-28923 Secure Boot Security Feature Bypass Vulnerability
Medium 6.3
CVE-2024-28898 Secure Boot Security Feature Bypass Vulnerability
Medium 6.2
CVE-2024-28917 Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability
Medium 6.2
CVE-2024-29064 Windows Hyper-V Denial of Service Vulnerability
Medium 6.1
CVE-2024-20665 BitLocker Security Feature Bypass Vulnerability
Medium 5.9
CVE-2024-20685 Azure Private 5G Core Denial of Service Vulnerability
EPSS 5.5%
Medium 5.5
CVE-2024-26172 Windows DWM Core Library Information Disclosure Vulnerability
Medium 5.5
CVE-2024-26207 Windows Remote Access Connection Manager Information Disclosure Vulnerability
Medium 5.5
CVE-2024-26209 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
EPSS 15%
Medium 5.5
CVE-2024-26217 Windows Remote Access Connection Manager Information Disclosure Vulnerability
Medium 5.5
CVE-2024-26255 Windows Remote Access Connection Manager Information Disclosure Vulnerability
Medium 5.5
CVE-2024-28900 Windows Remote Access Connection Manager Information Disclosure Vulnerability
Medium 5.5
CVE-2024-28901 Windows Remote Access Connection Manager Information Disclosure Vulnerability
Medium 5.5
CVE-2024-28902 Windows Remote Access Connection Manager Information Disclosure Vulnerability
Medium 5.5
CVE-2024-29992 Azure Identity Library for .NET Information Disclosure Vulnerability
Medium 5.0
CVE-2024-26220 Windows Mobile Hotspot Information Disclosure Vulnerability
EPSS 1.1%
Medium 4.3
CVE-2024-29056 Windows Authentication Elevation of Privilege Vulnerability
EPSS 1%
Medium 4.1
CVE-2024-28922 Secure Boot Security Feature Bypass Vulnerability