Microsoft Patch Tuesday, February 2024: the CVEs

Microsoft Patch Tuesday February 2024: the CVEs Microsoft published on 13 February 2024, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Jan 2024, Dec 2023, Nov 2023, Oct 2023, Sep 2023, Aug 2023, Jul 2023, Jun 2023, May 2023, Apr 2023, Mar 2023, Feb 2023. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 9.8CVE-2024-21413KEVEPSS 95%2024-02-13

   Microsoft Outlook Remote Code Execution Vulnerability

2. 9.8CVE-2024-21410KEVEPSS 13%2024-02-13

   Microsoft Exchange Server Elevation of Privilege Vulnerability

3. 9.0CVE-2024-21403EPSS 1.3%2024-02-13

   Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

4. 9.8CVE-2024-21401EPSS 1.5%2024-02-13

   Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability

5. 9.0CVE-2024-21376EPSS 1.2%2024-02-13

   Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability

6. 9.3CVE-2024-21364EPSS 0.6%2024-02-13

   Microsoft Azure Site Recovery Elevation of Privilege Vulnerability