Patch days / October 2024

Microsoft Patch Tuesday — October 2024

Tuesday, 8 October 2024

Vulnerabilities: 118
Critical: 2
High: 76
Zero-days: 2
Public exploit: 4

Exploited 3

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

Critical 9.8
CVE-2024-43468 Exploited Public exploit Microsoft Configuration Manager Remote Code Execution Vulnerability
EPSS 81%
High 7.8
CVE-2024-43572 Zero-day Microsoft Management Console Remote Code Execution Vulnerability
EPSS 67%
Medium 6.5
CVE-2024-43573 Zero-day Windows MSHTML Platform Spoofing Vulnerability
EPSS 46%

Critical 1

Critical 9.0
CVE-2024-38124 Public exploit Windows Netlogon Elevation of Privilege Vulnerability
EPSS 1.2%

Public exploit code 2

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 7.8
CVE-2024-43583 Public exploit Winlogon Elevation of Privilege Vulnerability
EPSS 1.3%
High 7.0
CVE-2024-43535 Public exploit Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

All vulnerabilities 118

Critical2 Show

Critical 9.8
CVE-2024-43468 Exploited Public exploit Microsoft Configuration Manager Remote Code Execution Vulnerability
EPSS 81%
Critical 9.0
CVE-2024-38124 Public exploit Windows Netlogon Elevation of Privilege Vulnerability
EPSS 1.2%

High76 Show

High 7.8
CVE-2024-43572 Zero-day Microsoft Management Console Remote Code Execution Vulnerability
EPSS 67%
High 8.8
CVE-2024-38179 Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability
High 8.8
CVE-2024-38212 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2024-38265 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2024-43453 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-43488 Visual Studio Code extension for Arduino Remote Code Execution Vulnerability
EPSS 1.2%
High 8.8
CVE-2024-43517 Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2024-43518 Windows Telephony Server Remote Code Execution Vulnerability
High 8.8
CVE-2024-43519 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-43532 Remote Registry Service Elevation of Privilege Vulnerability
EPSS 12%
High 8.8
CVE-2024-43533 Remote Desktop Client Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2024-43549 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2024-43564 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2024-43589 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2024-43592 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-43593 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.7%
High 8.8
CVE-2024-43599 Remote Desktop Client Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2024-43607 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2024-43608 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2024-43611 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
EPSS 1.8%
High 8.7
CVE-2024-43591 Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability
EPSS 1.6%
High 8.4
CVE-2024-43497 DeepSpeed Remote Code Execution Vulnerability
High 8.3
CVE-2024-43574 Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
EPSS 1.2%
High 8.1
CVE-2024-38229 .NET and Visual Studio Remote Code Execution Vulnerability
EPSS 2.1%
High 8.1
CVE-2024-43582 Remote Desktop Protocol Server Remote Code Execution Vulnerability
EPSS 3.2%
High 8.0
CVE-2024-30092 Windows Hyper-V Remote Code Execution Vulnerability
High 7.8
CVE-2024-43583 Public exploit Winlogon Elevation of Privilege Vulnerability
EPSS 1.3%
High 7.8
CVE-2024-38261 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High 7.8
CVE-2024-43501 Windows Common Log File System Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2024-43503 Microsoft SharePoint Elevation of Privilege Vulnerability
High 7.8
CVE-2024-43504 Microsoft Excel Remote Code Execution Vulnerability
EPSS 6.4%
High 7.8
CVE-2024-43505 Microsoft Office Visio Remote Code Execution Vulnerability
High 7.8
CVE-2024-43509 Windows Graphics Component Elevation of Privilege Vulnerability
High 7.8
CVE-2024-43514 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
High 7.8
CVE-2024-43516 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
High 7.8
CVE-2024-43527 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2024-43528 Windows Secure Kernel Mode Elevation of Privilege Vulnerability
High 7.8
CVE-2024-43551 Windows Storage Elevation of Privilege Vulnerability
High 7.8
CVE-2024-43556 Windows Graphics Component Elevation of Privilege Vulnerability
High 7.8
CVE-2024-43560 Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
EPSS 3.6%
High 7.8
CVE-2024-43563 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High 7.8
CVE-2024-43576 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2024-43590 Visual C++ Redistributable Installer Elevation of Privilege Vulnerability
High 7.8
CVE-2024-43601 Visual Studio Code for Linux Remote Code Execution Vulnerability
EPSS 1.1%
High 7.8
CVE-2024-43616 Microsoft Office Remote Code Execution Vulnerability
High 7.7
CVE-2024-43584 Windows Scripting Engine Security Feature Bypass Vulnerability
High 7.5
CVE-2024-38029 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
EPSS 1.4%
High 7.5
CVE-2024-38129 Windows Kerberos Elevation of Privilege Vulnerability
EPSS 1.3%
High 7.5
CVE-2024-38149 BranchCache Denial of Service Vulnerability
EPSS 2.2%
High 7.5
CVE-2024-38262 Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
EPSS 1.1%
High 7.5
CVE-2024-43483 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
EPSS 2.9%
High 7.5
CVE-2024-43484 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
EPSS 3%
High 7.5
CVE-2024-43485 .NET and Visual Studio Denial of Service Vulnerability
EPSS 3.1%
High 7.5
CVE-2024-43506 BranchCache Denial of Service Vulnerability
EPSS 2.3%
High 7.5
CVE-2024-43515 Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability
EPSS 2.3%
High 7.5
CVE-2024-43521 Windows Hyper-V Denial of Service Vulnerability
EPSS 2.4%
High 7.5
CVE-2024-43541 Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
EPSS 2.3%
High 7.5
CVE-2024-43544 Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
EPSS 2.2%
High 7.5
CVE-2024-43545 Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
EPSS 2.2%
High 7.5
CVE-2024-43562 Windows Network Address Translation (NAT) Denial of Service Vulnerability
EPSS 2.2%
High 7.5
CVE-2024-43565 Windows Network Address Translation (NAT) Denial of Service Vulnerability
EPSS 2.2%
High 7.5
CVE-2024-43567 Windows Hyper-V Denial of Service Vulnerability
EPSS 2.3%
High 7.5
CVE-2024-43575 Windows Hyper-V Denial of Service Vulnerability
EPSS 2.3%
High 7.4
CVE-2024-43550 Windows Secure Channel Spoofing Vulnerability
EPSS 1.1%
High 7.4
CVE-2024-43553 NT OS Kernel Elevation of Privilege Vulnerability
High 7.4
CVE-2024-43610 Copilot Studio Information Disclosure Vulnerability
EPSS 1%
High 7.3
CVE-2024-43529 Windows Print Spooler Elevation of Privilege Vulnerability
High 7.3
CVE-2024-43552 Windows Shell Remote Code Execution Vulnerability
High 7.1
CVE-2024-20659 Windows Hyper-V Security Feature Bypass Vulnerability
High 7.1
CVE-2024-38097 Azure Monitor Agent Elevation of Privilege Vulnerability
High 7.1
CVE-2024-43502 Windows Kernel Elevation of Privilege Vulnerability
EPSS 6.3%
High 7.1
CVE-2024-43581 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
EPSS 1.4%
High 7.1
CVE-2024-43615 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
EPSS 1.2%
High 7.0
CVE-2024-43535 Public exploit Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
High 7.0
CVE-2024-43511 Windows Kernel Elevation of Privilege Vulnerability
High 7.0
CVE-2024-43522 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

Medium40 Show

Medium 6.5
CVE-2024-43573 Zero-day Windows MSHTML Platform Spoofing Vulnerability
EPSS 46%
Medium 6.9
CVE-2024-43612 Power BI Report Server Spoofing Vulnerability
Medium 6.8
CVE-2024-43523 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-43524 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-43525 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-43526 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-43536 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.8
CVE-2024-43543 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium 6.7
CVE-2024-37976 Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
Medium 6.7
CVE-2024-37979 Windows Kernel Elevation of Privilege Vulnerability
Medium 6.7
CVE-2024-37982 Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
Medium 6.7
CVE-2024-37983 Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
Medium 6.6
CVE-2024-43480 Azure Service Fabric for Linux Remote Code Execution Vulnerability
EPSS 1.1%
Medium 6.5
CVE-2024-43481 Power BI Report Server Spoofing Vulnerability
EPSS 1.8%
Medium 6.5
CVE-2024-43512 Windows Standards-Based Storage Management Service Denial of Service Vulnerability
EPSS 2.1%
Medium 6.5
CVE-2024-43534 Windows Graphics Component Information Disclosure Vulnerability
EPSS 1.8%
Medium 6.5
CVE-2024-43537 Windows Mobile Broadband Driver Denial of Service Vulnerability
Medium 6.5
CVE-2024-43538 Windows Mobile Broadband Driver Denial of Service Vulnerability
Medium 6.5
CVE-2024-43540 Windows Mobile Broadband Driver Denial of Service Vulnerability
Medium 6.5
CVE-2024-43542 Windows Mobile Broadband Driver Denial of Service Vulnerability
Medium 6.5
CVE-2024-43547 Windows Kerberos Information Disclosure Vulnerability
Medium 6.5
CVE-2024-43555 Windows Mobile Broadband Driver Denial of Service Vulnerability
Medium 6.5
CVE-2024-43557 Windows Mobile Broadband Driver Denial of Service Vulnerability
Medium 6.5
CVE-2024-43558 Windows Mobile Broadband Driver Denial of Service Vulnerability
Medium 6.5
CVE-2024-43559 Windows Mobile Broadband Driver Denial of Service Vulnerability
Medium 6.5
CVE-2024-43561 Windows Mobile Broadband Driver Denial of Service Vulnerability
Medium 6.5
CVE-2024-43609 Microsoft Office Spoofing Vulnerability
EPSS 2.1%
Medium 6.4
CVE-2024-43513 BitLocker Security Feature Bypass Vulnerability
Medium 6.4
CVE-2024-43570 Windows Kernel Elevation of Privilege Vulnerability
Medium 5.7
CVE-2024-43604 Outlook for Android Elevation of Privilege Vulnerability
EPSS 1.2%
Medium 5.6
CVE-2024-43546 Windows Cryptographic Information Disclosure Vulnerability
Medium 5.6
CVE-2024-43571 Sudo for Windows Spoofing Vulnerability
Medium 5.5
CVE-2024-43500 Windows Resilient File System (ReFS) Information Disclosure Vulnerability
Medium 5.5
CVE-2024-43508 Windows Graphics Component Information Disclosure Vulnerability
Medium 5.5
CVE-2024-43554 Windows Kernel-Mode Driver Information Disclosure Vulnerability
Medium 5.5
CVE-2024-43585 Code Integrity Guard Security Feature Bypass Vulnerability
Medium 5.5
CVE-2024-43603 Visual Studio Collector Service Denial of Service Vulnerability
Medium 5.5
CVE-2024-43614 Microsoft Defender for Endpoint for Linux Spoofing Vulnerability
Medium 5.0
CVE-2024-43520 Windows Kernel Denial of Service Vulnerability
Medium 4.8
CVE-2024-43456 Windows Remote Desktop Services Tampering Vulnerability