Microsoft Patch Tuesday, August 2024: the CVEs

Microsoft Patch Tuesday August 2024: the CVEs Microsoft published on 13 August 2024, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Jul 2024, Jun 2024, May 2024, Apr 2024, Mar 2024, Feb 2024, Jan 2024, Dec 2023, Nov 2023, Oct 2023, Sep 2023, Aug 2023. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 6.5CVE-2024-38213KEVEPSS 14%2024-08-13

   Windows Mark of the Web Security Feature Bypass Vulnerability

2. 7.8CVE-2024-38193KEVExploitEPSS 29%2024-08-13

   Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

3. 8.8CVE-2024-38189KEVEPSS 8.2%2024-08-13

   Microsoft Project Remote Code Execution Vulnerability

4. 7.5CVE-2024-38178KEVEPSS 41%2024-08-13

   Scripting Engine Memory Corruption Vulnerability

5. 7.8CVE-2024-38107KEVEPSS 1.6%2024-08-13

   Windows Power Dependency Coordinator Elevation of Privilege Vulnerability

6. 7.0CVE-2024-38106KEVEPSS 6.3%2024-08-13

   Windows Kernel Elevation of Privilege Vulnerability