Microsoft Patch Tuesday, October 2024: the CVEs

Microsoft Patch Tuesday October 2024: the CVEs Microsoft published on 8 October 2024, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Sep 2024, Aug 2024, Jul 2024, Jun 2024, May 2024, Apr 2024, Mar 2024, Feb 2024, Jan 2024, Dec 2023, Nov 2023, Oct 2023. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 9.1CVE-2024-43591EPSS 1.6%2024-10-08

   Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

2. 9.8CVE-2024-43488EPSS 1.2%2024-10-08

   Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.

3. 9.8CVE-2024-43468KEVEPSS 81%2024-10-08

   Microsoft Configuration Manager Remote Code Execution Vulnerability

4. 9.0CVE-2024-38124EPSS 1.2%2024-10-08

   Windows Netlogon Elevation of Privilege Vulnerability