Microsoft Patch Tuesday — June 2024

Tuesday, 11 June 2024

Vulnerabilities: 52
Critical: 1
High: 36
Zero-days: 0
Public exploit: 6

Exploited 2

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.8
CVE-2024-35250 Exploited Public exploit Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
EPSS 25%
High 7.0
CVE-2024-30088 Exploited Public exploit Windows Kernel Elevation of Privilege Vulnerability
EPSS 68%

Critical 1

Critical 9.8
CVE-2024-30080 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
EPSS 43%

Public exploit code 4

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 7.8
CVE-2024-30085 Public exploit Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
EPSS 14%
High 7.0
CVE-2024-30084 Public exploit Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
EPSS 5.9%
High 7.0
CVE-2024-30090 Public exploit Microsoft Streaming Service Elevation of Privilege Vulnerability
EPSS 2%
Medium 4.7
CVE-2024-30052 Public exploit Visual Studio Remote Code Execution Vulnerability
EPSS 1.4%

All vulnerabilities 52

Critical1 Show

Critical 9.8
CVE-2024-30080 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
EPSS 43%

High36 Show

High 7.8
CVE-2024-35250 Exploited Public exploit Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
EPSS 25%
High 7.0
CVE-2024-30088 Exploited Public exploit Windows Kernel Elevation of Privilege Vulnerability
EPSS 68%
High 8.8
CVE-2024-30064 Windows Kernel Elevation of Privilege Vulnerability
High 8.8
CVE-2024-30068 Windows Kernel Elevation of Privilege Vulnerability
High 8.8
CVE-2024-30078 Windows Wi-Fi Driver Remote Code Execution Vulnerability
EPSS 5.2%
High 8.8
CVE-2024-30097 Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-30103 Microsoft Outlook Remote Code Execution Vulnerability
EPSS 3.4%
High 8.8
CVE-2024-35249 Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
EPSS 3.4%
High 8.1
CVE-2024-37325 Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability
EPSS 1.1%
High 8.0
CVE-2024-30074 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
EPSS 1.2%
High 8.0
CVE-2024-30075 Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
High 8.0
CVE-2024-30077 Windows OLE Remote Code Execution Vulnerability
EPSS 1.8%
High 7.8
CVE-2024-30085 Public exploit Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
EPSS 14%
High 7.8
CVE-2024-30062 Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability
EPSS 1%
High 7.8
CVE-2024-30072 Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability
High 7.8
CVE-2024-30082 Win32k Elevation of Privilege Vulnerability
EPSS 1.3%
High 7.8
CVE-2024-30086 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2024-30087 Win32k Elevation of Privilege Vulnerability
EPSS 9.5%
High 7.8
CVE-2024-30089 Microsoft Streaming Service Elevation of Privilege Vulnerability
EPSS 8.1%
High 7.8
CVE-2024-30091 Win32k Elevation of Privilege Vulnerability
EPSS 4.3%
High 7.8
CVE-2024-30094 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 7.8
CVE-2024-30095 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1%
High 7.8
CVE-2024-30100 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 1.2%
High 7.8
CVE-2024-30104 Microsoft Office Remote Code Execution Vulnerability
EPSS 1.5%
High 7.5
CVE-2024-30070 DHCP Server Service Denial of Service Vulnerability
EPSS 2.3%
High 7.5
CVE-2024-30083 Windows Standards-Based Storage Management Service Denial of Service Vulnerability
EPSS 2.5%
High 7.5
CVE-2024-30101 Microsoft Office Remote Code Execution Vulnerability
EPSS 1.8%
High 7.5
CVE-2024-35252 Azure Storage Movement Client Library Denial of Service Vulnerability
EPSS 2.5%
High 7.3
CVE-2024-30093 Windows Storage Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.3
CVE-2024-30102 Microsoft Office Remote Code Execution Vulnerability
High 7.3
CVE-2024-35248 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
High 7.1
CVE-2024-35254 Azure Monitor Agent Elevation of Privilege Vulnerability
High 7.0
CVE-2024-30084 Public exploit Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
EPSS 5.9%
High 7.0
CVE-2024-30090 Public exploit Microsoft Streaming Service Elevation of Privilege Vulnerability
EPSS 2%
High 7.0
CVE-2024-30099 Windows Kernel Elevation of Privilege Vulnerability
High 7.0
CVE-2024-35265 Windows Perception Service Elevation of Privilege Vulnerability

Medium15 Show

Medium 6.8
CVE-2024-30076 Windows Container Manager Service Elevation of Privilege Vulnerability
EPSS 1.7%
Medium 6.7
CVE-2024-29060 Visual Studio Elevation of Privilege Vulnerability
Medium 6.7
CVE-2024-30063 Windows Distributed File System (DFS) Remote Code Execution Vulnerability
EPSS 1%
Medium 5.7
CVE-2024-35263 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
EPSS 1.7%
Medium 5.5
CVE-2024-30065 Windows Themes Denial of Service Vulnerability
Medium 5.5
CVE-2024-30066 Winlogon Elevation of Privilege Vulnerability
Medium 5.5
CVE-2024-30067 Winlogon Elevation of Privilege Vulnerability
Medium 5.5
CVE-2024-30096 Windows Cryptographic Services Information Disclosure Vulnerability
Medium 5.5
CVE-2024-35255 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
Medium 5.4
CVE-2024-30057 Microsoft Edge for iOS Spoofing Vulnerability
Medium 5.4
CVE-2024-30058 Microsoft Edge (Chromium-based) Spoofing Vulnerability
Medium 4.7
CVE-2024-30052 Public exploit Visual Studio Remote Code Execution Vulnerability
EPSS 1.4%
Medium 4.7
CVE-2024-30069 Windows Remote Access Connection Manager Information Disclosure Vulnerability
Medium 4.4
CVE-2024-35253 Microsoft Azure File Sync Elevation of Privilege Vulnerability
Medium 4.3
CVE-2024-38083 Microsoft Edge (Chromium-based) Spoofing Vulnerability

Most affected products

Windows Server 2019 30 · 1 crit.
Windows Server 2019 (Server Core installation) 30 · 1 crit.
Windows Server 2022 29 · 1 crit.
Windows 11 version 23H2 28 · 1 crit.
Windows 11 version 22H2 28 · 1 crit.
Windows Server 2022, 23H2 Edition (Server Core installation) 28 · 1 crit.
Windows 10 Version 1809 27 · 1 crit.
Windows 10 Version 21H2 27 · 1 crit.
Windows 10 Version 22H2 27 · 1 crit.
Windows 11 version 21H2 27 · 1 crit.
Windows Server 2016 26 · 1 crit.
Windows Server 2016 (Server Core installation) 26 · 1 crit.

About this page

CVEs published by Microsoft as CVE numbering authority from the day before to two days after its patch day (11 Jun). Exploitation status is updated daily, so a vulnerability can turn red after the release.

All Microsoft vulnerabilities →