Patch days / July 2024

Microsoft Patch Tuesday — July 2024

Tuesday, 9 July 2024

Vulnerabilities: 138
Critical: 4
High: 114
Zero-days: 2
Public exploit: 4

Exploited 3

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.8
CVE-2024-38080 Zero-day Public exploit Windows Hyper-V Elevation of Privilege Vulnerability
EPSS 7.1%
High 7.5
CVE-2024-38112 Zero-day Public exploit Windows MSHTML Platform Spoofing Vulnerability
EPSS 84%
High 7.2
CVE-2024-38094 Exploited Microsoft SharePoint Remote Code Execution Vulnerability
EPSS 51%

Critical 4

Critical 9.8
CVE-2024-38077 Public exploit Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
EPSS 84%
Critical 9.8
CVE-2024-38074 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
EPSS 2.2%
Critical 9.8
CVE-2024-38076 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
EPSS 2.1%
Critical 9.1
CVE-2024-38089 Microsoft Defender for IoT Elevation of Privilege Vulnerability
EPSS 1.2%

Public exploit code 1

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

Medium 5.5
CVE-2024-38041 Public exploit Windows Kernel Information Disclosure Vulnerability
EPSS 2.2%

All vulnerabilities 138

Critical4 Show

Critical 9.8
CVE-2024-38077 Public exploit Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
EPSS 84%
Critical 9.8
CVE-2024-38074 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
EPSS 2.2%
Critical 9.8
CVE-2024-38076 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
EPSS 2.1%
Critical 9.1
CVE-2024-38089 Microsoft Defender for IoT Elevation of Privilege Vulnerability
EPSS 1.2%

High114 Show

High 7.8
CVE-2024-38080 Zero-day Public exploit Windows Hyper-V Elevation of Privilege Vulnerability
EPSS 7.1%
High 7.5
CVE-2024-38112 Zero-day Public exploit Windows MSHTML Platform Spoofing Vulnerability
EPSS 84%
High 7.2
CVE-2024-38094 Exploited Microsoft SharePoint Remote Code Execution Vulnerability
EPSS 51%
High 8.8
CVE-2024-20701 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-21303 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-21308 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-21317 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-21331 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-21332 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.8%
High 8.8
CVE-2024-21333 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.8%
High 8.8
CVE-2024-21335 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.8%
High 8.8
CVE-2024-21373 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.8%
High 8.8
CVE-2024-21398 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.9%
High 8.8
CVE-2024-21414 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.9%
High 8.8
CVE-2024-21415 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.8%
High 8.8
CVE-2024-21417 Windows Text Services Framework Elevation of Privilege Vulnerability
High 8.8
CVE-2024-21425 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-21428 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.8%
High 8.8
CVE-2024-21449 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-28899 Secure Boot Security Feature Bypass Vulnerability
EPSS 1.2%
High 8.8
CVE-2024-28928 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-30013 Windows MultiPoint Services Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-35256 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-35271 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.9%
High 8.8
CVE-2024-35272 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.9%
High 8.8
CVE-2024-37318 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.9%
High 8.8
CVE-2024-37319 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-37320 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-37321 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-37322 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-37323 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-37324 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-37326 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-37327 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-37328 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-37329 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-37330 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-37331 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.9%
High 8.8
CVE-2024-37332 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.9%
High 8.8
CVE-2024-37333 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-37334 Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-37336 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-37973 Secure Boot Security Feature Bypass Vulnerability
High 8.8
CVE-2024-38021 Microsoft Outlook Remote Code Execution Vulnerability
EPSS 3.5%
High 8.8
CVE-2024-38053 Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
EPSS 1.1%
High 8.8
CVE-2024-38060 Windows Imaging Component Remote Code Execution Vulnerability
EPSS 16%
High 8.8
CVE-2024-38087 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-38088 SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-38092 Azure CycleCloud Elevation of Privilege Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-38104 Windows Fax Service Remote Code Execution Vulnerability
EPSS 1.8%
High 8.4
CVE-2024-37984 Secure Boot Security Feature Bypass Vulnerability
High 8.1
CVE-2024-35264 .NET and Visual Studio Remote Code Execution Vulnerability
EPSS 2.6%
High 8.0
CVE-2024-37969 Secure Boot Security Feature Bypass Vulnerability
EPSS 1.4%
High 8.0
CVE-2024-37970 Secure Boot Security Feature Bypass Vulnerability
EPSS 1.1%
High 8.0
CVE-2024-37971 Secure Boot Security Feature Bypass Vulnerability
EPSS 1.4%
High 8.0
CVE-2024-37972 Secure Boot Security Feature Bypass Vulnerability
High 8.0
CVE-2024-37974 Secure Boot Security Feature Bypass Vulnerability
High 8.0
CVE-2024-37975 Secure Boot Security Feature Bypass Vulnerability
EPSS 1.3%
High 8.0
CVE-2024-37977 Secure Boot Security Feature Bypass Vulnerability
EPSS 1.1%
High 8.0
CVE-2024-37978 Secure Boot Security Feature Bypass Vulnerability
High 8.0
CVE-2024-37981 Secure Boot Security Feature Bypass Vulnerability
EPSS 1.1%
High 8.0
CVE-2024-37986 Secure Boot Security Feature Bypass Vulnerability
High 8.0
CVE-2024-37987 Secure Boot Security Feature Bypass Vulnerability
EPSS 1.3%
High 8.0
CVE-2024-37988 Secure Boot Security Feature Bypass Vulnerability
High 8.0
CVE-2024-37989 Secure Boot Security Feature Bypass Vulnerability
High 8.0
CVE-2024-38010 Secure Boot Security Feature Bypass Vulnerability
High 8.0
CVE-2024-38011 Secure Boot Security Feature Bypass Vulnerability
EPSS 1.3%
High 7.8
CVE-2024-30079 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
High 7.8
CVE-2024-35261 Azure Network Watcher VM Extension Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38034 Windows Filtering Platform Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38043 PowerShell Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38047 PowerShell Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38050 Windows Workstation Service Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38051 Windows Graphics Component Remote Code Execution Vulnerability
EPSS 1.1%
High 7.8
CVE-2024-38052 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
EPSS 7%
High 7.8
CVE-2024-38054 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
EPSS 10%
High 7.8
CVE-2024-38057 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38059 Win32k Elevation of Privilege Vulnerability
EPSS 3.7%
High 7.8
CVE-2024-38062 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
EPSS 1.6%
High 7.8
CVE-2024-38066 Windows Win32k Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38070 Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability
High 7.8
CVE-2024-38079 Windows Graphics Component Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38085 Windows Graphics Component Elevation of Privilege Vulnerability
EPSS 5.3%
High 7.8
CVE-2024-38100 Windows File Explorer Elevation of Privilege Vulnerability
EPSS 4.5%
High 7.6
CVE-2024-35266 Azure DevOps Server Spoofing Vulnerability
EPSS 1.6%
High 7.6
CVE-2024-35267 Azure DevOps Server Spoofing Vulnerability
EPSS 1.6%
High 7.5
CVE-2024-30098 Windows Cryptographic Services Security Feature Bypass Vulnerability
EPSS 1.2%
High 7.5
CVE-2024-30105 .NET and Visual Studio Denial of Service Vulnerability
EPSS 2.9%
High 7.5
CVE-2024-32987 Microsoft SharePoint Server Information Disclosure Vulnerability
EPSS 2.3%
High 7.5
CVE-2024-38015 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
EPSS 2.4%
High 7.5
CVE-2024-38031 Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
EPSS 2.5%
High 7.5
CVE-2024-38061 DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability
EPSS 1.5%
High 7.5
CVE-2024-38064 Windows TCP/IP Information Disclosure Vulnerability
EPSS 2.2%
High 7.5
CVE-2024-38067 Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
EPSS 2.5%
High 7.5
CVE-2024-38068 Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
EPSS 2.5%
High 7.5
CVE-2024-38071 Windows Remote Desktop Licensing Service Denial of Service Vulnerability
EPSS 36%
High 7.5
CVE-2024-38072 Windows Remote Desktop Licensing Service Denial of Service Vulnerability
EPSS 2.2%
High 7.5
CVE-2024-38073 Windows Remote Desktop Licensing Service Denial of Service Vulnerability
EPSS 2.5%
High 7.5
CVE-2024-38078 Xbox Wireless Adapter Remote Code Execution Vulnerability
High 7.5
CVE-2024-38091 Microsoft WS-Discovery Denial of Service Vulnerability
EPSS 1.9%
High 7.5
CVE-2024-38095 .NET and Visual Studio Denial of Service Vulnerability
EPSS 2.7%
High 7.3
CVE-2024-30061 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
EPSS 1.4%
High 7.3
CVE-2024-38033 PowerShell Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.3
CVE-2024-38081 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
EPSS 1.3%
High 7.2
CVE-2024-38019 Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
EPSS 1.8%
High 7.2
CVE-2024-38023 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 53%
High 7.2
CVE-2024-38024 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 45%
High 7.2
CVE-2024-38025 Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
EPSS 2.1%
High 7.2
CVE-2024-38028 Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
EPSS 2.1%
High 7.2
CVE-2024-38044 DHCP Server Service Remote Code Execution Vulnerability
EPSS 2.1%
High 7.1
CVE-2024-30081 Windows NTLM Spoofing Vulnerability
EPSS 24%
High 7.1
CVE-2024-38032 Microsoft Xbox Remote Code Execution Vulnerability
EPSS 1%
High 7.0
CVE-2024-38022 Windows Image Acquisition Elevation of Privilege Vulnerability
High 7.0
CVE-2024-38069 Windows Enroll Engine Security Feature Bypass Vulnerability

Medium20 Show

Medium 6.8
CVE-2024-26184 Secure Boot Security Feature Bypass Vulnerability
Medium 6.8
CVE-2024-38058 BitLocker Security Feature Bypass Vulnerability
Medium 6.8
CVE-2024-38065 Secure Boot Security Feature Bypass Vulnerability
Medium 6.7
CVE-2024-38013 Microsoft Windows Server Backup Elevation of Privilege Vulnerability
Medium 6.6
CVE-2024-38049 Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability
EPSS 1.6%
Medium 6.5
CVE-2024-38020 Microsoft Outlook Spoofing Vulnerability
EPSS 1.8%
Medium 6.5
CVE-2024-38027 Windows Line Printer Daemon Service Denial of Service Vulnerability
EPSS 1%
Medium 6.5
CVE-2024-38030 Windows Themes Spoofing Vulnerability
EPSS 51%
Medium 6.5
CVE-2024-38048 Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability
EPSS 1%
Medium 6.5
CVE-2024-38101 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Medium 6.5
CVE-2024-38102 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Medium 6.5
CVE-2024-38105 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Medium 6.4
CVE-2024-38086 Azure Kinect SDK Remote Code Execution Vulnerability
Medium 5.9
CVE-2024-38099 Windows Remote Desktop Licensing Service Denial of Service Vulnerability
EPSS 1.3%
Medium 5.5
CVE-2024-38041 Public exploit Windows Kernel Information Disclosure Vulnerability
EPSS 2.2%
Medium 5.5
CVE-2024-38017 Microsoft Message Queuing Information Disclosure Vulnerability
Medium 5.5
CVE-2024-38055 Microsoft Windows Codecs Library Information Disclosure Vulnerability
Medium 5.5
CVE-2024-38056 Microsoft Windows Codecs Library Information Disclosure Vulnerability
Medium 5.3
CVE-2024-35270 Windows iSCSI Service Denial of Service Vulnerability
Medium 4.7
CVE-2024-30071 Windows Remote Access Connection Manager Information Disclosure Vulnerability