cve.bz

Microsoft Patch Tuesday, October 2024: the CVEs

Filter

Microsoft Patch Tuesday October 2024: the CVEs Microsoft published on 8 October 2024, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Sep 2024, Aug 2024, Jul 2024, Jun 2024, May 2024, Apr 2024, Mar 2024, Feb 2024, Jan 2024, Dec 2023, Nov 2023, Oct 2023. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 7.8CVE-2024-43616EPSS 0.8%

    Microsoft Office Remote Code Execution Vulnerability

  2. 7.1CVE-2024-43615EPSS 1.2%

    Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

  3. 5.5CVE-2024-43614EPSS 0.6%

    Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.

  4. 4.7CVE-2024-43612EPSS 0.7%

    Power BI Report Server Spoofing Vulnerability

  5. 8.8CVE-2024-43611EPSS 1.8%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  6. 6.5CVE-2024-43609EPSS 2.1%

    Microsoft Office Spoofing Vulnerability

  7. 8.8CVE-2024-43608EPSS 1.4%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  8. 8.8CVE-2024-43607EPSS 1.4%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  9. 8.0CVE-2024-43604EPSS 1.2%

    Outlook for Android Elevation of Privilege Vulnerability

  10. 5.5CVE-2024-43603EPSS 0.8%

    Visual Studio Collector Service Denial of Service Vulnerability

  11. 7.8CVE-2024-43601EPSS 1.1%

    Visual Studio Code for Linux Remote Code Execution Vulnerability

  12. 8.8CVE-2024-43599EPSS 1.4%

    Remote Desktop Client Remote Code Execution Vulnerability

  13. 8.8CVE-2024-43593EPSS 1.7%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  14. 8.8CVE-2024-43592EPSS 1.7%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  15. 9.1CVE-2024-43591EPSS 1.6%

    Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

  16. 7.8CVE-2024-43590EPSS 0.4%

    Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

  17. 8.8CVE-2024-43589EPSS 1.5%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  18. 5.5CVE-2024-43585EPSS 0.5%

    Code Integrity Guard Security Feature Bypass Vulnerability

  19. 8.4CVE-2024-43584EPSS 0.5%

    Windows Scripting Engine Security Feature Bypass Vulnerability

  20. 7.8CVE-2024-43583EPSS 1.3%

    Winlogon Elevation of Privilege Vulnerability

  21. 8.1CVE-2024-43582EPSS 3.2%

    Remote Desktop Protocol Server Remote Code Execution Vulnerability

  22. 7.1CVE-2024-43581EPSS 1.4%

    Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

  23. 7.8CVE-2024-43576EPSS 0.5%

    Microsoft Office Remote Code Execution Vulnerability

  24. 7.5CVE-2024-43575EPSS 2.3%

    Windows Hyper-V Denial of Service Vulnerability

  25. 8.3CVE-2024-43574EPSS 1.2%

    Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

  26. 8.1CVE-2024-43573KEVEPSS 46%

    Windows MSHTML Platform Spoofing Vulnerability

  27. 7.8CVE-2024-43572KEVEPSS 67%

    Microsoft Management Console Remote Code Execution Vulnerability

  28. 7.3CVE-2024-43571EPSS 0.6%

    Sudo for Windows Spoofing Vulnerability

  29. 7.0CVE-2024-43570EPSS 0.5%

    Windows Kernel Elevation of Privilege Vulnerability

  30. 7.5CVE-2024-43567EPSS 2.3%

    Windows Hyper-V Denial of Service Vulnerability

  31. 7.5CVE-2024-43565EPSS 2.2%

    Windows Network Address Translation (NAT) Denial of Service Vulnerability

  32. 8.8CVE-2024-43564EPSS 1.4%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  33. 7.8CVE-2024-43563EPSS 0.5%

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  34. 7.5CVE-2024-43562EPSS 2.2%

    Windows Network Address Translation (NAT) Denial of Service Vulnerability

  35. 6.5CVE-2024-43561EPSS 0.8%

    Windows Mobile Broadband Driver Denial of Service Vulnerability

  36. 7.8CVE-2024-43560EPSS 3.6%

    Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

  37. 6.5CVE-2024-43559EPSS 0.8%

    Windows Mobile Broadband Driver Denial of Service Vulnerability

  38. 6.5CVE-2024-43558EPSS 0.8%

    Windows Mobile Broadband Driver Denial of Service Vulnerability

  39. 6.5CVE-2024-43557EPSS 0.8%

    Windows Mobile Broadband Driver Denial of Service Vulnerability

  40. 7.8CVE-2024-43556EPSS 0.7%

    Windows Graphics Component Elevation of Privilege Vulnerability

  41. 6.5CVE-2024-43555EPSS 0.8%

    Windows Mobile Broadband Driver Denial of Service Vulnerability

  42. 5.5CVE-2024-43554EPSS 0.6%

    Windows Kernel-Mode Driver Information Disclosure Vulnerability

  43. 7.0CVE-2024-43553EPSS 0.5%

    NT OS Kernel Elevation of Privilege Vulnerability

  44. 7.3CVE-2024-43552EPSS 0.8%

    Windows Shell Remote Code Execution Vulnerability

  45. 7.8CVE-2024-43551EPSS 0.6%

    Windows Storage Elevation of Privilege Vulnerability

  46. 7.4CVE-2024-43550EPSS 1.1%

    Windows Secure Channel Spoofing Vulnerability

  47. 8.8CVE-2024-43549EPSS 1.4%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

  48. 5.9CVE-2024-43547EPSS 0.7%

    Windows Kerberos Information Disclosure Vulnerability

  49. 5.6CVE-2024-43546EPSS 0.6%

    Windows Cryptographic Information Disclosure Vulnerability

  50. 7.5CVE-2024-43545EPSS 2.2%

    Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

  51. 7.5CVE-2024-43544EPSS 2.2%

    Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability

  52. 6.8CVE-2024-43543EPSS 0.6%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

  53. 6.5CVE-2024-43542EPSS 0.8%

    Windows Mobile Broadband Driver Denial of Service Vulnerability

  54. 7.5CVE-2024-43541EPSS 2.3%

    Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability

  55. 6.5CVE-2024-43540EPSS 0.8%

    Windows Mobile Broadband Driver Denial of Service Vulnerability

  56. 6.5CVE-2024-43538EPSS 0.8%

    Windows Mobile Broadband Driver Denial of Service Vulnerability

  57. 6.5CVE-2024-43537EPSS 0.8%

    Windows Mobile Broadband Driver Denial of Service Vulnerability

  58. 6.8CVE-2024-43536EPSS 0.6%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

  59. 7.0CVE-2024-43535EPSS 0.5%

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

  60. 6.5CVE-2024-43534EPSS 1.8%

    Windows Graphics Component Information Disclosure Vulnerability

  61. 8.8CVE-2024-43533EPSS 1.6%

    Remote Desktop Client Remote Code Execution Vulnerability

  62. 8.8CVE-2024-43532EPSS 12%

    Remote Registry Service Elevation of Privilege Vulnerability

  63. 7.3CVE-2024-43529EPSS 0.8%

    Windows Print Spooler Elevation of Privilege Vulnerability

  64. 7.8CVE-2024-43528EPSS 0.5%

    Windows Secure Kernel Mode Elevation of Privilege Vulnerability

  65. 7.8CVE-2024-43527EPSS 0.6%

    Windows Kernel Elevation of Privilege Vulnerability

  66. 6.8CVE-2024-43526EPSS 0.7%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

  67. 6.8CVE-2024-43525EPSS 0.7%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

  68. 6.8CVE-2024-43524EPSS 0.7%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

  69. 6.8CVE-2024-43523EPSS 0.7%

    Windows Mobile Broadband Driver Remote Code Execution Vulnerability

  70. 7.0CVE-2024-43522EPSS 0.5%

    Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

  71. 7.5CVE-2024-43521EPSS 2.4%

    Windows Hyper-V Denial of Service Vulnerability

  72. 5.0CVE-2024-43520EPSS 1.0%

    Windows Kernel Denial of Service Vulnerability

  73. 8.8CVE-2024-43519EPSS 1.5%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  74. 8.8CVE-2024-43518EPSS 1.0%

    Windows Telephony Server Remote Code Execution Vulnerability

  75. 8.8CVE-2024-43517EPSS 1.4%

    Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

  76. 7.8CVE-2024-43516EPSS 0.6%

    Windows Secure Kernel Mode Elevation of Privilege Vulnerability

  77. 7.5CVE-2024-43515EPSS 2.3%

    Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability

  78. 7.8CVE-2024-43514EPSS 0.6%

    Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

  79. 6.4CVE-2024-43513EPSS 0.6%

    BitLocker Security Feature Bypass Vulnerability

  80. 7.5CVE-2024-43512EPSS 2.1%

    Windows Standards-Based Storage Management Service Denial of Service Vulnerability

  81. 7.0CVE-2024-43511EPSS 0.4%

    Windows Kernel Elevation of Privilege Vulnerability

  82. 7.8CVE-2024-43509EPSS 0.6%

    Windows Graphics Component Elevation of Privilege Vulnerability

  83. 5.5CVE-2024-43508EPSS 0.6%

    Windows Graphics Component Information Disclosure Vulnerability

  84. 7.5CVE-2024-43506EPSS 2.3%

    BranchCache Denial of Service Vulnerability

  85. 7.8CVE-2024-43505EPSS 0.7%

    Microsoft Office Visio Remote Code Execution Vulnerability

  86. 7.8CVE-2024-43504EPSS 6.4%

    Microsoft Excel Remote Code Execution Vulnerability

  87. 7.8CVE-2024-43503EPSS 0.6%

    Microsoft SharePoint Elevation of Privilege Vulnerability

  88. 7.1CVE-2024-43502EPSS 6.3%

    Windows Kernel Elevation of Privilege Vulnerability

  89. 7.8CVE-2024-43501EPSS 0.7%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  90. 5.5CVE-2024-43500EPSS 0.6%

    Windows Resilient File System (ReFS) Information Disclosure Vulnerability

  91. 7.8CVE-2024-43497EPSS 0.7%

    DeepSpeed Remote Code Execution Vulnerability

  92. 9.8CVE-2024-43488EPSS 1.2%

    Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.

  93. 7.5CVE-2024-43485EPSS 3.1%

    .NET and Visual Studio Denial of Service Vulnerability

  94. 7.5CVE-2024-43484EPSS 3.0%

    .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

  95. 7.5CVE-2024-43483EPSS 2.9%

    .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability

  96. 8.8CVE-2024-43481EPSS 1.8%

    Power BI Report Server Spoofing Vulnerability

  97. 6.6CVE-2024-43480EPSS 1.1%

    Azure Service Fabric for Linux Remote Code Execution Vulnerability

  98. 9.8CVE-2024-43468KEVEPSS 81%

    Microsoft Configuration Manager Remote Code Execution Vulnerability

  99. 7.4CVE-2024-43456EPSS 0.7%

    Windows Remote Desktop Services Tampering Vulnerability

  100. 8.8CVE-2024-43453EPSS 1.5%

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability