Microsoft Patch Tuesday, July 2024: the CVEs

Microsoft Patch Tuesday July 2024: the CVEs Microsoft published on 9 July 2024, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Jun 2024, May 2024, Apr 2024, Mar 2024, Feb 2024, Jan 2024, Dec 2023, Nov 2023, Oct 2023, Sep 2023, Aug 2023, Jul 2023. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 7.5CVE-2024-38112KEVEPSS 84%2024-07-09

   Windows MSHTML Platform Spoofing Vulnerability

2. 6.5CVE-2024-38105EPSS 0.8%2024-07-09

   Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

3. 8.8CVE-2024-38104EPSS 1.8%2024-07-09

   Windows Fax Service Remote Code Execution Vulnerability

4. 6.5CVE-2024-38102EPSS 0.8%2024-07-09

   Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

5. 6.5CVE-2024-38101EPSS 0.8%2024-07-09

   Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

6. 7.8CVE-2024-38100EPSS 4.5%2024-07-09

   Windows File Explorer Elevation of Privilege Vulnerability

7. 5.9CVE-2024-38099EPSS 1.3%2024-07-09

   Windows Remote Desktop Licensing Service Denial of Service Vulnerability

8. 7.5CVE-2024-38095EPSS 2.7%2024-07-09

   .NET and Visual Studio Denial of Service Vulnerability

9. 7.2CVE-2024-38094KEVEPSS 51%2024-07-09

   Microsoft SharePoint Remote Code Execution Vulnerability

10. 8.8CVE-2024-38092EPSS 1.6%2024-07-09

    Azure CycleCloud Elevation of Privilege Vulnerability

11. 7.5CVE-2024-38091EPSS 1.9%2024-07-09

    Microsoft WS-Discovery Denial of Service Vulnerability

12. 9.9CVE-2024-38089EPSS 1.2%2024-07-09

    Microsoft Defender for IoT Elevation of Privilege Vulnerability

13. 8.8CVE-2024-38088EPSS 1.7%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

14. 8.8CVE-2024-38087EPSS 1.7%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

15. 6.4CVE-2024-38086EPSS 0.6%2024-07-09

    Azure Kinect SDK Remote Code Execution Vulnerability

16. 7.8CVE-2024-38085EPSS 5.3%2024-07-09

    Windows Graphics Component Elevation of Privilege Vulnerability

17. 7.3CVE-2024-38081EPSS 1.3%2024-07-09

    .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

18. 7.8CVE-2024-38080KEVEPSS 7.1%2024-07-09

    Windows Hyper-V Elevation of Privilege Vulnerability

19. 7.8CVE-2024-38079EPSS 0.7%2024-07-09

    Windows Graphics Component Elevation of Privilege Vulnerability

20. 7.5CVE-2024-38078EPSS 0.7%2024-07-09

    Xbox Wireless Adapter Remote Code Execution Vulnerability

21. 9.8CVE-2024-38077EPSS 84%2024-07-09

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

22. 9.8CVE-2024-38076EPSS 2.1%2024-07-09

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

23. 9.8CVE-2024-38074EPSS 2.2%2024-07-09

    Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

24. 7.5CVE-2024-38073EPSS 2.5%2024-07-09

    Windows Remote Desktop Licensing Service Denial of Service Vulnerability

25. 7.5CVE-2024-38072EPSS 2.2%2024-07-09

    Windows Remote Desktop Licensing Service Denial of Service Vulnerability

26. 7.5CVE-2024-38071EPSS 36%2024-07-09

    Windows Remote Desktop Licensing Service Denial of Service Vulnerability

27. 7.8CVE-2024-38070EPSS 0.7%2024-07-09

    Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability

28. 7.0CVE-2024-38069EPSS 0.3%2024-07-09

    Windows Enroll Engine Security Feature Bypass Vulnerability

29. 7.5CVE-2024-38068EPSS 2.5%2024-07-09

    Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

30. 7.5CVE-2024-38067EPSS 2.5%2024-07-09

    Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

31. 7.8CVE-2024-38066EPSS 0.9%2024-07-09

    Windows Win32k Elevation of Privilege Vulnerability

32. 6.8CVE-2024-38065EPSS 0.9%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

33. 7.5CVE-2024-38064EPSS 2.2%2024-07-09

    Windows TCP/IP Information Disclosure Vulnerability

34. 7.8CVE-2024-38062EPSS 1.6%2024-07-09

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

35. 7.5CVE-2024-38061EPSS 1.5%2024-07-09

    DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability

36. 8.8CVE-2024-38060EPSS 16%2024-07-09

    Windows Imaging Component Remote Code Execution Vulnerability

37. 7.8CVE-2024-38059EPSS 3.7%2024-07-09

    Win32k Elevation of Privilege Vulnerability

38. 6.8CVE-2024-38058EPSS 0.9%2024-07-09

    BitLocker Security Feature Bypass Vulnerability

39. 7.8CVE-2024-38057EPSS 0.8%2024-07-09

    Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

40. 5.5CVE-2024-38056EPSS 0.8%2024-07-09

    Microsoft Windows Codecs Library Information Disclosure Vulnerability

41. 5.5CVE-2024-38055EPSS 0.8%2024-07-09

    Microsoft Windows Codecs Library Information Disclosure Vulnerability

42. 7.8CVE-2024-38054EPSS 10%2024-07-09

    Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

43. 8.8CVE-2024-38053EPSS 1.1%2024-07-09

    Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

44. 7.8CVE-2024-38052EPSS 7.0%2024-07-09

    Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

45. 7.8CVE-2024-38051EPSS 1.1%2024-07-09

    Windows Graphics Component Remote Code Execution Vulnerability

46. 7.8CVE-2024-38050EPSS 0.7%2024-07-09

    Windows Workstation Service Elevation of Privilege Vulnerability

47. 8.1CVE-2024-38049EPSS 1.6%2024-07-09

    Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability

48. 6.5CVE-2024-38048EPSS 1.0%2024-07-09

    Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability

49. 7.8CVE-2024-38047EPSS 0.7%2024-07-09

    PowerShell Elevation of Privilege Vulnerability

50. 7.2CVE-2024-38044EPSS 2.1%2024-07-09

    DHCP Server Service Remote Code Execution Vulnerability

51. 7.8CVE-2024-38043EPSS 0.7%2024-07-09

    PowerShell Elevation of Privilege Vulnerability

52. 5.5CVE-2024-38041EPSS 2.2%2024-07-09

    Windows Kernel Information Disclosure Vulnerability

53. 7.8CVE-2024-38034EPSS 0.8%2024-07-09

    Windows Filtering Platform Elevation of Privilege Vulnerability

54. 7.3CVE-2024-38033EPSS 1.1%2024-07-09

    PowerShell Elevation of Privilege Vulnerability

55. 7.1CVE-2024-38032EPSS 1.0%2024-07-09

    Microsoft Xbox Remote Code Execution Vulnerability

56. 7.5CVE-2024-38031EPSS 2.5%2024-07-09

    Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

57. 6.5CVE-2024-38030EPSS 51%2024-07-09

    Windows Themes Spoofing Vulnerability

58. 7.2CVE-2024-38028EPSS 2.1%2024-07-09

    Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

59. 6.5CVE-2024-38027EPSS 1.0%2024-07-09

    Windows Line Printer Daemon Service Denial of Service Vulnerability

60. 7.2CVE-2024-38025EPSS 2.1%2024-07-09

    Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

61. 7.2CVE-2024-38024EPSS 45%2024-07-09

    Microsoft SharePoint Server Remote Code Execution Vulnerability

62. 7.2CVE-2024-38023EPSS 53%2024-07-09

    Microsoft SharePoint Server Remote Code Execution Vulnerability

63. 7.0CVE-2024-38022EPSS 0.6%2024-07-09

    Windows Image Acquisition Elevation of Privilege Vulnerability

64. 8.8CVE-2024-38021EPSS 3.5%2024-07-09

    Microsoft Outlook Remote Code Execution Vulnerability

65. 6.5CVE-2024-38020EPSS 1.8%2024-07-09

    Microsoft Outlook Spoofing Vulnerability

66. 7.2CVE-2024-38019EPSS 1.8%2024-07-09

    Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

67. 5.5CVE-2024-38017EPSS 0.9%2024-07-09

    Microsoft Message Queuing Information Disclosure Vulnerability

68. 7.5CVE-2024-38015EPSS 2.4%2024-07-09

    Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

69. 6.7CVE-2024-38013EPSS 0.6%2024-07-09

    Microsoft Windows Server Backup Elevation of Privilege Vulnerability

70. 8.0CVE-2024-38011EPSS 1.3%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

71. 8.0CVE-2024-38010EPSS 1.0%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

72. 8.0CVE-2024-37989EPSS 1.0%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

73. 8.0CVE-2024-37988EPSS 1.0%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

74. 8.0CVE-2024-37987EPSS 1.3%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

75. 8.0CVE-2024-37986EPSS 1.0%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

76. 8.4CVE-2024-37984EPSS 0.7%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

77. 8.0CVE-2024-37981EPSS 1.1%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

78. 8.0CVE-2024-37978EPSS 0.9%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

79. 8.0CVE-2024-37977EPSS 1.1%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

80. 8.0CVE-2024-37975EPSS 1.3%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

81. 8.0CVE-2024-37974EPSS 1.0%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

82. 8.8CVE-2024-37973EPSS 0.6%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

83. 8.0CVE-2024-37972EPSS 1.0%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

84. 8.0CVE-2024-37971EPSS 1.4%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

85. 8.0CVE-2024-37970EPSS 1.1%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

86. 8.0CVE-2024-37969EPSS 1.4%2024-07-09

    Secure Boot Security Feature Bypass Vulnerability

87. 8.8CVE-2024-37336EPSS 1.7%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

88. 8.8CVE-2024-37334EPSS 1.6%2024-07-09

    Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

89. 8.8CVE-2024-37333EPSS 1.6%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

90. 8.8CVE-2024-37332EPSS 1.9%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

91. 8.8CVE-2024-37331EPSS 1.9%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

92. 8.8CVE-2024-37330EPSS 1.6%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

93. 8.8CVE-2024-37329EPSS 1.6%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

94. 8.8CVE-2024-37328EPSS 1.6%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

95. 8.8CVE-2024-37327EPSS 1.6%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

96. 8.8CVE-2024-37326EPSS 1.6%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

97. 8.8CVE-2024-37324EPSS 1.6%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

98. 8.8CVE-2024-37323EPSS 1.6%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

99. 8.8CVE-2024-37322EPSS 1.6%2024-07-09

    SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

100. 8.8CVE-2024-37321EPSS 1.6%2024-07-09

     SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability