Microsoft Patch Tuesday, August 2024: the CVEs

Microsoft Patch Tuesday August 2024: the CVEs Microsoft published on 13 August 2024, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Jul 2024, Jun 2024, May 2024, Apr 2024, Mar 2024, Feb 2024, Jan 2024, Dec 2023, Nov 2023, Oct 2023, Sep 2023, Aug 2023. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 6.8CVE-2024-38223EPSS 0.7%2024-08-13

   Windows Initial Machine Configuration Elevation of Privilege Vulnerability

2. 7.8CVE-2024-38215EPSS 0.7%2024-08-13

   Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

3. 6.5CVE-2024-38214EPSS 1.6%2024-08-13

   Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

4. 6.5CVE-2024-38213KEVEPSS 14%2024-08-13

   Windows Mark of the Web Security Feature Bypass Vulnerability

5. 8.2CVE-2024-38211EPSS 1.0%2024-08-13

   Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

6. 7.0CVE-2024-38201EPSS 0.6%2024-08-13

   Azure Stack Hub Elevation of Privilege Vulnerability

7. 9.8CVE-2024-38199EPSS 2.2%2024-08-13

   Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

8. 7.5CVE-2024-38198EPSS 0.8%2024-08-13

   Windows Print Spooler Elevation of Privilege Vulnerability

9. 6.5CVE-2024-38197EPSS 17%2024-08-13

   Microsoft Teams for iOS Spoofing Vulnerability

10. 7.8CVE-2024-38196EPSS 6.0%2024-08-13

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

11. 7.8CVE-2024-38195EPSS 0.5%2024-08-13

    Azure CycleCloud Remote Code Execution Vulnerability

12. 7.8CVE-2024-38193KEVExploitEPSS 29%2024-08-13

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

13. 7.8CVE-2024-38191EPSS 0.5%2024-08-13

    Kernel Streaming Service Driver Elevation of Privilege Vulnerability

14. 8.8CVE-2024-38189KEVEPSS 8.2%2024-08-13

    Microsoft Project Remote Code Execution Vulnerability

15. 7.8CVE-2024-38187EPSS 1.1%2024-08-13

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

16. 7.8CVE-2024-38186EPSS 0.8%2024-08-13

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

17. 7.8CVE-2024-38185EPSS 1.1%2024-08-13

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

18. 7.8CVE-2024-38184EPSS 1.2%2024-08-13

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

19. 8.8CVE-2024-38180EPSS 1.6%2024-08-13

    Windows SmartScreen Security Feature Bypass Vulnerability

20. 7.5CVE-2024-38178KEVEPSS 41%2024-08-13

    Scripting Engine Memory Corruption Vulnerability

21. 7.8CVE-2024-38177EPSS 0.9%2024-08-13

    Windows App Installer Spoofing Vulnerability

22. 6.7CVE-2024-38173EPSS 0.7%2024-08-13

    Microsoft Outlook Remote Code Execution Vulnerability

23. 7.8CVE-2024-38172EPSS 0.9%2024-08-13

    Microsoft Excel Remote Code Execution Vulnerability

24. 7.8CVE-2024-38171EPSS 0.9%2024-08-13

    Microsoft PowerPoint Remote Code Execution Vulnerability

25. 7.1CVE-2024-38170EPSS 0.8%2024-08-13

    Microsoft Excel Remote Code Execution Vulnerability

26. 7.8CVE-2024-38169EPSS 0.8%2024-08-13

    Microsoft Office Visio Remote Code Execution Vulnerability

27. 7.5CVE-2024-38168EPSS 2.7%2024-08-13

    .NET and Visual Studio Denial of Service Vulnerability

28. 6.5CVE-2024-38167EPSS 1.4%2024-08-13

    .NET and Visual Studio Information Disclosure Vulnerability

29. 6.5CVE-2024-38165EPSS 1.3%2024-08-13

    Windows Compressed Folder Tampering Vulnerability

30. 7.8CVE-2024-38162EPSS 0.5%2024-08-13

    Azure Connected Machine Agent Elevation of Privilege Vulnerability

31. 6.8CVE-2024-38161EPSS 0.8%2024-08-13

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

32. 9.1CVE-2024-38160EPSS 2.2%2024-08-13

    Windows Network Virtualization Remote Code Execution Vulnerability

33. 9.1CVE-2024-38159EPSS 2.2%2024-08-13

    Windows Network Virtualization Remote Code Execution Vulnerability

34. 7.0CVE-2024-38158EPSS 0.4%2024-08-13

    Azure IoT SDK Remote Code Execution Vulnerability

35. 7.0CVE-2024-38157EPSS 0.5%2024-08-13

    Azure IoT SDK Remote Code Execution Vulnerability

36. 5.5CVE-2024-38155EPSS 0.7%2024-08-13

    Security Center Broker Information Disclosure Vulnerability

37. 8.8CVE-2024-38154EPSS 1.6%2024-08-13

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

38. 7.8CVE-2024-38153EPSS 0.5%2024-08-13

    Windows Kernel Elevation of Privilege Vulnerability

39. 7.8CVE-2024-38152EPSS 0.9%2024-08-13

    Windows OLE Remote Code Execution Vulnerability

40. 5.5CVE-2024-38151EPSS 0.6%2024-08-13

    Windows Kernel Information Disclosure Vulnerability

41. 7.8CVE-2024-38150EPSS 3.7%2024-08-13

    Windows DWM Core Library Elevation of Privilege Vulnerability

42. 7.5CVE-2024-38148EPSS 32%2024-08-13

    Windows Secure Channel Denial of Service Vulnerability

43. 7.8CVE-2024-38147EPSS 3.3%2024-08-13

    Microsoft DWM Core Library Elevation of Privilege Vulnerability

44. 7.5CVE-2024-38146EPSS 2.5%2024-08-13

    Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

45. 7.5CVE-2024-38145EPSS 2.5%2024-08-13

    Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability

46. 8.8CVE-2024-38144EPSS 32%2024-08-13

    Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

47. 4.2CVE-2024-38143EPSS 1.7%2024-08-13

    Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

48. 7.8CVE-2024-38142EPSS 0.6%2024-08-13

    Windows Secure Kernel Mode Elevation of Privilege Vulnerability

49. 7.8CVE-2024-38141EPSS 3.7%2024-08-13

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

50. 9.8CVE-2024-38140EPSS 3.8%2024-08-13

    Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

51. 7.5CVE-2024-38138EPSS 1.7%2024-08-13

    Windows Deployment Services Remote Code Execution Vulnerability

52. 7.0CVE-2024-38137EPSS 0.4%2024-08-13

    Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability

53. 7.0CVE-2024-38136EPSS 0.4%2024-08-13

    Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability

54. 7.8CVE-2024-38135EPSS 0.7%2024-08-13

    Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

55. 7.8CVE-2024-38134EPSS 0.7%2024-08-13

    Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

56. 7.8CVE-2024-38133EPSS 0.7%2024-08-13

    Windows Kernel Elevation of Privilege Vulnerability

57. 7.5CVE-2024-38132EPSS 2.5%2024-08-13

    Windows Network Address Translation (NAT) Denial of Service Vulnerability

58. 8.8CVE-2024-38131EPSS 1.3%2024-08-13

    Clipboard Virtual Channel Extension Remote Code Execution Vulnerability

59. 8.8CVE-2024-38130EPSS 1.6%2024-08-13

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

60. 8.8CVE-2024-38128EPSS 1.6%2024-08-13

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

61. 7.8CVE-2024-38127EPSS 1.6%2024-08-13

    Windows Hyper-V Elevation of Privilege Vulnerability

62. 7.5CVE-2024-38126EPSS 2.7%2024-08-13

    Windows Network Address Translation (NAT) Denial of Service Vulnerability

63. 7.8CVE-2024-38125EPSS 5.9%2024-08-13

    Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

64. 4.4CVE-2024-38123EPSS 0.7%2024-08-13

    Windows Bluetooth Driver Information Disclosure Vulnerability

65. 5.5CVE-2024-38122EPSS 0.6%2024-08-13

    Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

66. 8.8CVE-2024-38121EPSS 1.6%2024-08-13

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

67. 8.8CVE-2024-38120EPSS 1.6%2024-08-13

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

68. 5.5CVE-2024-38118EPSS 0.6%2024-08-13

    Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

69. 7.8CVE-2024-38117EPSS 0.7%2024-08-13

    NTFS Elevation of Privilege Vulnerability

70. 8.8CVE-2024-38116EPSS 1.8%2024-08-13

    Windows IP Routing Management Snapin Remote Code Execution Vulnerability

71. 8.8CVE-2024-38115EPSS 1.6%2024-08-13

    Windows IP Routing Management Snapin Remote Code Execution Vulnerability

72. 8.8CVE-2024-38114EPSS 1.6%2024-08-13

    Windows IP Routing Management Snapin Remote Code Execution Vulnerability

73. 8.8CVE-2024-38109EPSS 1.8%2024-08-13

    An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network.

74. 9.3CVE-2024-38108EPSS 1.2%2024-08-13

    Azure Stack Hub Spoofing Vulnerability

75. 7.8CVE-2024-38107KEVEPSS 1.6%2024-08-13

    Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

76. 7.0CVE-2024-38106KEVEPSS 6.3%2024-08-13

    Windows Kernel Elevation of Privilege Vulnerability

77. 7.8CVE-2024-38098EPSS 0.6%2024-08-13

    Azure Connected Machine Agent Elevation of Privilege Vulnerability

78. 7.8CVE-2024-38084EPSS 0.7%2024-08-13

    Microsoft OfficePlus Elevation of Privilege Vulnerability

79. 9.8CVE-2024-38063EPSS 74%2024-08-13

    Windows TCP/IP Remote Code Execution Vulnerability

80. 7.5CVE-2024-37968EPSS 1.0%2024-08-13

    Windows DNS Spoofing Vulnerability

81. 8.1CVE-2024-29995EPSS 1.5%2024-08-13

    Windows Kerberos Elevation of Privilege Vulnerability