Microsoft Patch Tuesday, March 2024: the CVEs

Microsoft Patch Tuesday March 2024: the CVEs Microsoft published on 12 March 2024, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Feb 2024, Jan 2024, Dec 2023, Nov 2023, Oct 2023, Sep 2023, Aug 2023, Jul 2023, Jun 2023, May 2023, Apr 2023, Mar 2023. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 7.5CVE-2024-26204EPSS 2.1%2024-03-12

   Outlook for Android Information Disclosure Vulnerability

2. 7.3CVE-2024-26203EPSS 0.9%2024-03-12

   Azure Data Studio Elevation of Privilege Vulnerability

3. 6.6CVE-2024-26201EPSS 0.9%2024-03-12

   Microsoft Intune Linux Agent Elevation of Privilege Vulnerability

4. 7.8CVE-2024-26199EPSS 1.2%2024-03-12

   Microsoft Office Elevation of Privilege Vulnerability

5. 8.8CVE-2024-26198EPSS 6.8%2024-03-12

   Microsoft Exchange Server Remote Code Execution Vulnerability

6. 6.5CVE-2024-26197EPSS 2.8%2024-03-12

   Windows Standards-Based Storage Management Service Denial of Service Vulnerability

7. 7.5CVE-2024-26190EPSS 3.0%2024-03-12

   Microsoft QUIC Denial of Service Vulnerability

8. 6.5CVE-2024-26185EPSS 30%2024-03-12

   Windows Compressed Folder Tampering Vulnerability

9. 7.8CVE-2024-26182EPSS 5.6%2024-03-12

   Windows Kernel Elevation of Privilege Vulnerability

10. 5.5CVE-2024-26181EPSS 1.0%2024-03-12

    Windows Kernel Denial of Service Vulnerability

11. 7.8CVE-2024-26178EPSS 0.9%2024-03-12

    Windows Kernel Elevation of Privilege Vulnerability

12. 5.5CVE-2024-26177EPSS 1.1%2024-03-12

    Windows Kernel Information Disclosure Vulnerability

13. 7.8CVE-2024-26176EPSS 0.8%2024-03-12

    Windows Kernel Elevation of Privilege Vulnerability

14. 5.5CVE-2024-26174EPSS 0.9%2024-03-12

    Windows Kernel Information Disclosure Vulnerability

15. 7.8CVE-2024-26173EPSS 0.9%2024-03-12

    Windows Kernel Elevation of Privilege Vulnerability

16. 7.8CVE-2024-26170EPSS 6.6%2024-03-12

    Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

17. 7.8CVE-2024-26169KEVEPSS 4.0%2024-03-12

    Windows Error Reporting Service Elevation of Privilege Vulnerability

18. 8.8CVE-2024-26166EPSS 2.0%2024-03-12

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

19. 8.8CVE-2024-26165EPSS 1.9%2024-03-12

    Visual Studio Code Elevation of Privilege Vulnerability

20. 8.8CVE-2024-26164EPSS 2.1%2024-03-12

    Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability

21. 8.8CVE-2024-26162EPSS 2.0%2024-03-12

    Microsoft ODBC Driver Remote Code Execution Vulnerability

22. 8.8CVE-2024-26161EPSS 1.9%2024-03-12

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

23. 5.5CVE-2024-26160EPSS 11%2024-03-12

    Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

24. 8.8CVE-2024-26159EPSS 1.9%2024-03-12

    Microsoft ODBC Driver Remote Code Execution Vulnerability

25. 8.8CVE-2024-21451EPSS 1.9%2024-03-12

    Microsoft ODBC Driver Remote Code Execution Vulnerability

26. 8.8CVE-2024-21450EPSS 2.0%2024-03-12

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

27. 5.0CVE-2024-21448EPSS 1.2%2024-03-12

    Microsoft Teams for Android Information Disclosure Vulnerability

28. 7.8CVE-2024-21446EPSS 0.7%2024-03-12

    NTFS Elevation of Privilege Vulnerability

29. 7.0CVE-2024-21445EPSS 0.5%2024-03-12

    Windows USB Print Driver Elevation of Privilege Vulnerability

30. 8.8CVE-2024-21444EPSS 1.9%2024-03-12

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

31. 7.3CVE-2024-21443EPSS 1.3%2024-03-12

    Windows Kernel Elevation of Privilege Vulnerability

32. 7.8CVE-2024-21442EPSS 0.8%2024-03-12

    Windows USB Print Driver Elevation of Privilege Vulnerability

33. 8.8CVE-2024-21441EPSS 1.9%2024-03-12

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

34. 8.8CVE-2024-21440EPSS 2.0%2024-03-12

    Microsoft ODBC Driver Remote Code Execution Vulnerability

35. 7.0CVE-2024-21439EPSS 0.5%2024-03-12

    Windows Telephony Server Elevation of Privilege Vulnerability

36. 7.5CVE-2024-21438EPSS 2.7%2024-03-12

    Microsoft AllJoyn API Denial of Service Vulnerability

37. 7.8CVE-2024-21437EPSS 8.0%2024-03-12

    Windows Graphics Component Elevation of Privilege Vulnerability

38. 7.8CVE-2024-21436EPSS 0.7%2024-03-12

    Windows Installer Elevation of Privilege Vulnerability

39. 8.8CVE-2024-21435EPSS 2.0%2024-03-12

    Windows OLE Remote Code Execution Vulnerability

40. 7.8CVE-2024-21434EPSS 0.8%2024-03-12

    Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

41. 7.0CVE-2024-21433EPSS 5.1%2024-03-12

    Windows Print Spooler Elevation of Privilege Vulnerability

42. 7.0CVE-2024-21432EPSS 0.7%2024-03-12

    Windows Update Stack Elevation of Privilege Vulnerability

43. 6.7CVE-2024-21431EPSS 0.6%2024-03-12

    Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

44. 6.4CVE-2024-21430EPSS 0.7%2024-03-12

    Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability

45. 6.8CVE-2024-21429EPSS 0.9%2024-03-12

    Windows USB Hub Driver Remote Code Execution Vulnerability

46. 7.5CVE-2024-21427EPSS 1.5%2024-03-12

    Windows Kerberos Security Feature Bypass Vulnerability

47. 7.8CVE-2024-21426EPSS 3.9%2024-03-12

    Microsoft SharePoint Server Remote Code Execution Vulnerability

48. 7.5CVE-2024-21421EPSS 1.8%2024-03-12

    Azure SDK Spoofing Vulnerability

49. 5.4CVE-2024-21419EPSS 1.1%2024-03-12

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

50. 5.5CVE-2024-21408EPSS 4.5%2024-03-12

    Windows Hyper-V Denial of Service Vulnerability

51. 8.1CVE-2024-21407EPSS 16%2024-03-12

    Windows Hyper-V Remote Code Execution Vulnerability

52. 9.0CVE-2024-21400EPSS 2.2%2024-03-12

    Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

53. 7.5CVE-2024-21392EPSS 3.1%2024-03-12

    .NET and Visual Studio Denial of Service Vulnerability

54. 7.1CVE-2024-21390EPSS 1.3%2024-03-12

    Microsoft Authenticator Elevation of Privilege Vulnerability

55. 9.8CVE-2024-21334EPSS 20%2024-03-12

    Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

56. 7.8CVE-2024-21330EPSS 1.0%2024-03-12

    Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability

57. 5.5CVE-2024-20671EPSS 0.9%2024-03-12

    Microsoft Defender Security Feature Bypass Vulnerability