Patch days / May 2024

Microsoft Patch Tuesday — May 2024

Tuesday, 14 May 2024

Vulnerabilities: 60
Critical: 0
High: 33
Zero-days: 2
Public exploit: 3

Exploited 2

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 8.8
CVE-2024-30040 Zero-day Windows MSHTML Platform Security Feature Bypass Vulnerability
EPSS 3.9%
High 7.8
CVE-2024-30051 Zero-day Public exploit Windows DWM Core Library Elevation of Privilege Vulnerability
EPSS 6.2%

Public exploit code 2

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 7.8
CVE-2024-30038 Public exploit Win32k Elevation of Privilege Vulnerability
EPSS 2.6%
Medium 6.5
CVE-2024-30043 Public exploit Microsoft SharePoint Server Information Disclosure Vulnerability
EPSS 56%

All vulnerabilities 60

High33 Show

High 8.8
CVE-2024-30040 Zero-day Windows MSHTML Platform Security Feature Bypass Vulnerability
EPSS 3.9%
High 7.8
CVE-2024-30051 Zero-day Public exploit Windows DWM Core Library Elevation of Privilege Vulnerability
EPSS 6.2%
High 8.8
CVE-2024-30006 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-30007 Microsoft Brokering File System Elevation of Privilege Vulnerability
High 8.8
CVE-2024-30009 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-30010 Windows Hyper-V Remote Code Execution Vulnerability
EPSS 2.3%
High 8.8
CVE-2024-30017 Windows Hyper-V Remote Code Execution Vulnerability
EPSS 1.9%
High 8.1
CVE-2024-30020 Windows Cryptographic Services Remote Code Execution Vulnerability
EPSS 1.3%
High 7.8
CVE-2024-30038 Public exploit Win32k Elevation of Privilege Vulnerability
EPSS 2.6%
High 7.8
CVE-2024-26238 Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability
High 7.8
CVE-2024-29994 Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
High 7.8
CVE-2024-29996 Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 3.4%
High 7.8
CVE-2024-30018 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2024-30025 Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 4.3%
High 7.8
CVE-2024-30027 NTFS Elevation of Privilege Vulnerability
High 7.8
CVE-2024-30028 Win32k Elevation of Privilege Vulnerability
High 7.8
CVE-2024-30030 Win32k Elevation of Privilege Vulnerability
High 7.8
CVE-2024-30031 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
High 7.8
CVE-2024-30032 Windows DWM Core Library Elevation of Privilege Vulnerability
EPSS 4.5%
High 7.8
CVE-2024-30035 Windows DWM Core Library Elevation of Privilege Vulnerability
EPSS 3.5%
High 7.8
CVE-2024-30042 Microsoft Excel Remote Code Execution Vulnerability
EPSS 2.1%
High 7.8
CVE-2024-30049 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
High 7.8
CVE-2024-30060 Azure Monitor Agent Elevation of Privilege Vulnerability
High 7.6
CVE-2024-30047 Dynamics 365 Customer Insights Spoofing Vulnerability
High 7.6
CVE-2024-30048 Dynamics 365 Customer Insights Spoofing Vulnerability
High 7.5
CVE-2024-30014 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.5%
High 7.5
CVE-2024-30015 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.5%
High 7.5
CVE-2024-30022 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.5%
High 7.5
CVE-2024-30023 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.5%
High 7.5
CVE-2024-30024 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.5%
High 7.5
CVE-2024-30029 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.5%
High 7.2
CVE-2024-30044 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 81%
High 7.0
CVE-2024-30033 Windows Search Service Elevation of Privilege Vulnerability

Medium27 Show

Medium 6.8
CVE-2024-29997 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-29998 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-29999 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-30000 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-30001 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-30002 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-30003 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-30004 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-30005 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-30012 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-30021 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.5
CVE-2024-30043 Public exploit Microsoft SharePoint Server Information Disclosure Vulnerability
EPSS 56%
Medium 6.5
CVE-2024-30011 Windows Hyper-V Denial of Service Vulnerability
EPSS 2.6%
Medium 6.5
CVE-2024-30019 DHCP Server Service Denial of Service Vulnerability
EPSS 2.6%
Medium 6.5
CVE-2024-30036 Windows Deployment Services Information Disclosure Vulnerability
EPSS 2.3%
Medium 6.5
CVE-2024-30053 Azure Migrate Cross-Site Scripting Vulnerability
Medium 6.5
CVE-2024-30054 Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability
EPSS 1.7%
Medium 6.3
CVE-2024-30045 .NET and Visual Studio Remote Code Execution Vulnerability
EPSS 1.2%
Medium 6.1
CVE-2024-30059 Microsoft Intune for Android Mobile Application Management Tampering Vulnerability
Medium 5.9
CVE-2024-30046 Visual Studio Denial of Service Vulnerability
EPSS 1.7%
Medium 5.5
CVE-2024-30008 Windows DWM Core Library Information Disclosure Vulnerability
Medium 5.5
CVE-2024-30016 Windows Cryptographic Services Information Disclosure Vulnerability
Medium 5.5
CVE-2024-30034 Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
EPSS 6.9%
Medium 5.5
CVE-2024-30037 Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 5.3%
Medium 5.5
CVE-2024-30039 Windows Remote Access Connection Manager Information Disclosure Vulnerability
Medium 5.4
CVE-2024-30041 Microsoft Bing Search Spoofing Vulnerability
Medium 5.4
CVE-2024-30050 Windows Mark of the Web Security Feature Bypass Vulnerability
EPSS 11%