Microsoft Patch Tuesday — August 2024

Tuesday, 13 August 2024

Vulnerabilities: 82
Critical: 7
High: 61
Zero-days: 6
Public exploit: 5

Exploited 6

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 8.8
CVE-2024-38189 Zero-day Microsoft Project Remote Code Execution Vulnerability
EPSS 8.2%
High 7.8
CVE-2024-38193 Zero-day Public exploit Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
EPSS 29%
High 7.8
CVE-2024-38107 Zero-day Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
EPSS 1.6%
High 7.5
CVE-2024-38178 Zero-day Scripting Engine Memory Corruption Vulnerability
EPSS 41%
High 7.0
CVE-2024-38106 Zero-day Windows Kernel Elevation of Privilege Vulnerability
EPSS 6.3%
Medium 6.5
CVE-2024-38213 Zero-day Windows Mark of the Web Security Feature Bypass Vulnerability
EPSS 14%

Critical 7

Critical 9.8
CVE-2024-38063 Public exploit Windows TCP/IP Remote Code Execution Vulnerability
EPSS 74%
Critical 9.8
CVE-2024-38140 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
EPSS 3.8%
Critical 9.8
CVE-2024-38199 Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
EPSS 2.2%
Critical 9.3
CVE-2024-38108 Azure Stack Hub Spoofing Vulnerability
EPSS 1.2%
Critical 9.1
CVE-2024-38109 Azure Health Bot Elevation of Privilege Vulnerability
EPSS 1.8%
Critical 9.1
CVE-2024-38159 Windows Network Virtualization Remote Code Execution Vulnerability
EPSS 2.2%
Critical 9.1
CVE-2024-38160 Windows Network Virtualization Remote Code Execution Vulnerability
EPSS 2.2%

Public exploit code 3

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2024-38144 Public exploit Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
EPSS 32%
High 7.8
CVE-2024-38127 Public exploit Windows Hyper-V Elevation of Privilege Vulnerability
EPSS 1.6%
Medium 4.2
CVE-2024-38143 Public exploit Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
EPSS 1.7%

All vulnerabilities 82

Critical7 Show

Critical 9.8
CVE-2024-38063 Public exploit Windows TCP/IP Remote Code Execution Vulnerability
EPSS 74%
Critical 9.8
CVE-2024-38140 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
EPSS 3.8%
Critical 9.8
CVE-2024-38199 Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
EPSS 2.2%
Critical 9.3
CVE-2024-38108 Azure Stack Hub Spoofing Vulnerability
EPSS 1.2%
Critical 9.1
CVE-2024-38109 Azure Health Bot Elevation of Privilege Vulnerability
EPSS 1.8%
Critical 9.1
CVE-2024-38159 Windows Network Virtualization Remote Code Execution Vulnerability
EPSS 2.2%
Critical 9.1
CVE-2024-38160 Windows Network Virtualization Remote Code Execution Vulnerability
EPSS 2.2%

High61 Show

High 8.8
CVE-2024-38189 Zero-day Microsoft Project Remote Code Execution Vulnerability
EPSS 8.2%
High 7.8
CVE-2024-38193 Zero-day Public exploit Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
EPSS 29%
High 7.8
CVE-2024-38107 Zero-day Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
EPSS 1.6%
High 7.5
CVE-2024-38178 Zero-day Scripting Engine Memory Corruption Vulnerability
EPSS 41%
High 7.0
CVE-2024-38106 Zero-day Windows Kernel Elevation of Privilege Vulnerability
EPSS 6.3%
High 8.8
CVE-2024-38144 Public exploit Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
EPSS 32%
High 8.8
CVE-2024-38114 Windows IP Routing Management Snapin Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-38115 Windows IP Routing Management Snapin Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-38116 Windows IP Routing Management Snapin Remote Code Execution Vulnerability
EPSS 1.8%
High 8.8
CVE-2024-38120 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-38121 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-38128 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-38130 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-38131 Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2024-38154 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-38180 Windows SmartScreen Security Feature Bypass Vulnerability
EPSS 1.6%
High 8.2
CVE-2024-38211 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
High 8.1
CVE-2024-29995 Windows Kerberos Elevation of Privilege Vulnerability
EPSS 1.5%
High 7.8
CVE-2024-38127 Public exploit Windows Hyper-V Elevation of Privilege Vulnerability
EPSS 1.6%
High 7.8
CVE-2024-38084 Microsoft OfficePlus Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38098 Azure Connected Machine Agent Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38117 NTFS Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38125 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
EPSS 5.9%
High 7.8
CVE-2024-38133 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38134 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38135 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38141 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
EPSS 3.7%
High 7.8
CVE-2024-38142 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38147 Microsoft DWM Core Library Elevation of Privilege Vulnerability
EPSS 3.3%
High 7.8
CVE-2024-38150 Windows DWM Core Library Elevation of Privilege Vulnerability
EPSS 3.7%
High 7.8
CVE-2024-38152 Windows OLE Remote Code Execution Vulnerability
High 7.8
CVE-2024-38153 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38162 Azure Connected Machine Agent Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38163 Windows Update Stack Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38169 Microsoft Office Visio Remote Code Execution Vulnerability
High 7.8
CVE-2024-38171 Microsoft PowerPoint Remote Code Execution Vulnerability
High 7.8
CVE-2024-38172 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2024-38177 Windows App Installer Spoofing Vulnerability
High 7.8
CVE-2024-38184 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
EPSS 1.2%
High 7.8
CVE-2024-38185 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2024-38186 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38187 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2024-38191 Kernel Streaming Service Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2024-38195 Azure CycleCloud Remote Code Execution Vulnerability
High 7.8
CVE-2024-38196 Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 6%
High 7.8
CVE-2024-38215 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
High 7.5
CVE-2024-37968 Windows DNS Spoofing Vulnerability
EPSS 1%
High 7.5
CVE-2024-38126 Windows Network Address Translation (NAT) Denial of Service Vulnerability
EPSS 2.7%
High 7.5
CVE-2024-38132 Windows Network Address Translation (NAT) Denial of Service Vulnerability
EPSS 2.5%
High 7.5
CVE-2024-38138 Windows Deployment Services Remote Code Execution Vulnerability
EPSS 1.7%
High 7.5
CVE-2024-38145 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
EPSS 2.5%
High 7.5
CVE-2024-38146 Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
EPSS 2.5%
High 7.5
CVE-2024-38148 Windows Secure Channel Denial of Service Vulnerability
EPSS 32%
High 7.5
CVE-2024-38168 .NET and Visual Studio Denial of Service Vulnerability
EPSS 2.7%
High 7.5
CVE-2024-38198 Windows Print Spooler Elevation of Privilege Vulnerability
High 7.1
CVE-2024-38170 Microsoft Excel Remote Code Execution Vulnerability
High 7.0
CVE-2024-38136 Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
High 7.0
CVE-2024-38137 Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
High 7.0
CVE-2024-38157 Azure IoT SDK Remote Code Execution Vulnerability
High 7.0
CVE-2024-38158 Azure IoT SDK Remote Code Execution Vulnerability
High 7.0
CVE-2024-38201 Azure Stack Hub Elevation of Privilege Vulnerability

Medium14 Show

Medium 6.5
CVE-2024-38213 Zero-day Windows Mark of the Web Security Feature Bypass Vulnerability
EPSS 14%
Medium 6.8
CVE-2024-38161 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-38223 Windows Initial Machine Configuration Elevation of Privilege Vulnerability
Medium 6.7
CVE-2024-38173 Microsoft Outlook Remote Code Execution Vulnerability
Medium 6.5
CVE-2024-38165 Windows Compressed Folder Tampering Vulnerability
EPSS 1.3%
Medium 6.5
CVE-2024-38167 .NET and Visual Studio Information Disclosure Vulnerability
EPSS 1.4%
Medium 6.5
CVE-2024-38197 Microsoft Teams for iOS Spoofing Vulnerability
EPSS 17%
Medium 6.5
CVE-2024-38214 Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
EPSS 1.6%
Medium 5.5
CVE-2024-38118 Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
Medium 5.5
CVE-2024-38122 Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
Medium 5.5
CVE-2024-38151 Windows Kernel Information Disclosure Vulnerability
Medium 5.5
CVE-2024-38155 Security Center Broker Information Disclosure Vulnerability
Medium 4.4
CVE-2024-38123 Windows Bluetooth Driver Information Disclosure Vulnerability
Medium 4.2
CVE-2024-38143 Public exploit Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
EPSS 1.7%

Most affected products

Windows Server 2022 55 · 3 crit.
Windows Server 2022, 23H2 Edition (Server Core installation) 54 · 3 crit.
Windows Server 2019 51 · 3 crit.
Windows Server 2019 (Server Core installation) 51 · 3 crit.
Windows 11 version 23H2 50 · 3 crit.
Windows 11 version 22H2 50 · 3 crit.
Windows 11 version 22H3 50 · 3 crit.
Windows Server 2016 49 · 5 crit.
Windows Server 2016 (Server Core installation) 49 · 5 crit.
Windows 10 Version 21H2 49 · 3 crit.
Windows 10 Version 22H2 49 · 3 crit.
Windows 11 version 21H2 49 · 3 crit.

About this page

CVEs published by Microsoft as CVE numbering authority from the day before to two days after its patch day (13 Aug). Exploitation status is updated daily, so a vulnerability can turn red after the release.

All Microsoft vulnerabilities →