cve.bz

Microsoft Patch Tuesday, February 2024: the CVEs

Filter

Microsoft Patch Tuesday February 2024: the CVEs Microsoft published on 13 February 2024, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Jan 2024, Dec 2023, Nov 2023, Oct 2023, Sep 2023, Aug 2023, Jul 2023, Jun 2023, May 2023, Apr 2023, Mar 2023, Feb 2023. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 8.8CVE-2024-21420EPSS 1.7%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  2. 9.8CVE-2024-21413KEVEPSS 95%

    Microsoft Outlook Remote Code Execution Vulnerability

  3. 8.1CVE-2024-21412KEVEPSS 99.4%

    Internet Shortcut Files Security Feature Bypass Vulnerability

  4. 9.8CVE-2024-21410KEVEPSS 13%

    Microsoft Exchange Server Elevation of Privilege Vulnerability

  5. 7.5CVE-2024-21406EPSS 0.9%

    Windows Printing Service Spoofing Vulnerability

  6. 7.0CVE-2024-21405EPSS 0.4%

    Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

  7. 7.5CVE-2024-21404EPSS 2.7%

    .NET Denial of Service Vulnerability

  8. 9.0CVE-2024-21403EPSS 1.3%

    Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

  9. 7.1CVE-2024-21402EPSS 0.5%

    Microsoft Outlook Elevation of Privilege Vulnerability

  10. 9.8CVE-2024-21401EPSS 1.5%

    Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability

  11. 5.3CVE-2024-21397EPSS 0.5%

    Microsoft Azure File Sync Elevation of Privilege Vulnerability

  12. 7.6CVE-2024-21396EPSS 1.2%

    Dynamics 365 Sales Spoofing Vulnerability

  13. 8.2CVE-2024-21395EPSS 1.1%

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  14. 7.6CVE-2024-21394EPSS 1.1%

    Dynamics 365 Field Service Spoofing Vulnerability

  15. 7.6CVE-2024-21393EPSS 1.2%

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  16. 8.8CVE-2024-21391EPSS 1.6%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  17. 7.6CVE-2024-21389EPSS 1.2%

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  18. 7.5CVE-2024-21386EPSS 2.4%

    .NET Denial of Service Vulnerability

  19. 7.8CVE-2024-21384EPSS 0.8%

    Microsoft Office OneNote Remote Code Execution Vulnerability

  20. 6.8CVE-2024-21381EPSS 0.4%

    Microsoft Azure Active Directory B2C Spoofing Vulnerability

  21. 8.0CVE-2024-21380EPSS 1.7%

    Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability

  22. 7.8CVE-2024-21379EPSS 1.7%

    Microsoft Word Remote Code Execution Vulnerability

  23. 8.8CVE-2024-21378EPSS 11%

    Microsoft Outlook Remote Code Execution Vulnerability

  24. 5.5CVE-2024-21377EPSS 0.6%

    Windows DNS Information Disclosure Vulnerability

  25. 9.0CVE-2024-21376EPSS 1.2%

    Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability

  26. 8.8CVE-2024-21375EPSS 1.7%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  27. 5.0CVE-2024-21374EPSS 1.0%

    Microsoft Teams for Android Information Disclosure Vulnerability

  28. 8.8CVE-2024-21372EPSS 1.8%

    Windows OLE Remote Code Execution Vulnerability

  29. 7.0CVE-2024-21371EPSS 11%

    Windows Kernel Elevation of Privilege Vulnerability

  30. 8.8CVE-2024-21370EPSS 1.8%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  31. 8.8CVE-2024-21369EPSS 1.5%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  32. 8.8CVE-2024-21368EPSS 1.6%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  33. 8.8CVE-2024-21367EPSS 1.6%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  34. 8.8CVE-2024-21366EPSS 1.8%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  35. 8.8CVE-2024-21365EPSS 1.8%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  36. 9.3CVE-2024-21364EPSS 0.6%

    Microsoft Azure Site Recovery Elevation of Privilege Vulnerability

  37. 7.8CVE-2024-21363EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  38. 5.5CVE-2024-21362EPSS 0.4%

    Windows Kernel Security Feature Bypass Vulnerability

  39. 8.8CVE-2024-21361EPSS 1.6%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  40. 8.8CVE-2024-21360EPSS 1.8%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  41. 8.8CVE-2024-21359EPSS 1.6%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  42. 8.8CVE-2024-21358EPSS 1.8%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  43. 8.1CVE-2024-21357EPSS 27%

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  44. 6.5CVE-2024-21356EPSS 2.1%

    Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

  45. 7.0CVE-2024-21355EPSS 0.3%

    Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

  46. 7.8CVE-2024-21354EPSS 0.6%

    Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

  47. 8.8CVE-2024-21353EPSS 1.6%

    Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability

  48. 8.8CVE-2024-21352EPSS 1.6%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  49. 7.6CVE-2024-21351KEVEPSS 28%

    Windows SmartScreen Security Feature Bypass Vulnerability

  50. 8.8CVE-2024-21350EPSS 1.5%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  51. 8.8CVE-2024-21349EPSS 1.6%

    Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

  52. 7.5CVE-2024-21348EPSS 2.2%

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

  53. 7.5CVE-2024-21347EPSS 1.4%

    Microsoft ODBC Driver Remote Code Execution Vulnerability

  54. 7.8CVE-2024-21346EPSS 4.1%

    Win32k Elevation of Privilege Vulnerability

  55. 8.8CVE-2024-21345EPSS 20%

    Windows Kernel Elevation of Privilege Vulnerability

  56. 5.9CVE-2024-21344EPSS 1.7%

    Windows Network Address Translation (NAT) Denial of Service Vulnerability

  57. 7.5CVE-2024-21343EPSS 1.8%

    Windows Network Address Translation (NAT) Denial of Service Vulnerability

  58. 7.5CVE-2024-21342EPSS 2.5%

    Windows DNS Client Denial of Service Vulnerability

  59. 6.8CVE-2024-21341EPSS 1.0%

    Windows Kernel Remote Code Execution Vulnerability

  60. 4.6CVE-2024-21340EPSS 0.8%

    Windows Kernel Information Disclosure Vulnerability

  61. 6.4CVE-2024-21339EPSS 0.6%

    Windows USB Generic Parent Driver Remote Code Execution Vulnerability

  62. 7.8CVE-2024-21338KEVExploitEPSS 62%

    Windows Kernel Elevation of Privilege Vulnerability

  63. 7.3CVE-2024-21329EPSS 1.1%

    Azure Connected Machine Agent Elevation of Privilege Vulnerability

  64. 7.6CVE-2024-21328EPSS 1.3%

    Dynamics 365 Sales Spoofing Vulnerability

  65. 7.6CVE-2024-21327EPSS 1.3%

    Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

  66. 7.8CVE-2024-21315EPSS 0.6%

    Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability

  67. 4.1CVE-2024-21304EPSS 0.5%

    Trusted Compute Base Elevation of Privilege Vulnerability

  68. 5.7CVE-2024-20695EPSS 0.6%

    Skype for Business Information Disclosure Vulnerability

  69. 6.5CVE-2024-20684EPSS 1.0%

    Windows Hyper-V Denial of Service Vulnerability

  70. 6.5CVE-2024-20679EPSS 1.3%

    Azure Stack Hub Spoofing Vulnerability

  71. 7.8CVE-2024-20673EPSS 1.2%

    Microsoft Office Remote Code Execution Vulnerability

  72. 7.5CVE-2024-20667EPSS 1.4%

    Azure DevOps Server Remote Code Execution Vulnerability