Microsoft's security release of 12 March 2024
Patch Tuesday, March 2024
As of , CISA lists one of the 59 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2024-26169, Windows Error Reporting Service Elevation of Privilege.
On CISA's list of exploited vulnerabilities
- CVE-2024-26169Windows Error Reporting Service Elevation of Privilege. Listed by CISA on 13 June 2024, 93 days after the release
The release in numbers
| What | CVEs |
|---|---|
| CVE records Microsoft published | 59 CVEs |
| On CISA's list of exploited vulnerabilities | 1 CVE |
| CISA's SSVC exploitation: active | 1 CVE |
| CISA's SSVC exploitation: proof of concept | 5 CVEs |
| CISA's SSVC exploitation: none | 53 CVEs |
| Not assessed by CISA's SSVC | none |
| Critical by CVSS (9.0 or more) | 2 CVEs |
| EPSS 0.10 or more | 4 CVEs |
Patch first: the release in our order
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 1 | CVE-2024-26169Windows Error Reporting Service Elevation of Privilege | Active | Patch this weekListed | 7.8 High | 0.04 |
| 2 | CVE-2024-21392.NET and Visual Studio Denial of Service | Proof of concept | Not on CISA's list | 7.5 High | 0.03 |
| 3 | CVE-2024-21400Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege | Proof of concept | Not on CISA's list | 9.0 Critical | 0.02 |
| 4 | CVE-2024-21330Open Management Infrastructure (OMI) Elevation of Privilege | Proof of concept | Not on CISA's list | 7.8 High | 0.01 |
| 5 | CVE-2024-26201Microsoft Intune Linux Agent Elevation of Privilege | Proof of concept | Not on CISA's list | 6.6 Medium | 0.01 |
| 6 | CVE-2024-21430Windows USB Attached SCSI (UAS) Protocol Remote Code Execution | Proof of concept | Not on CISA's list | 5.7 Medium | 0.01 |
| 7 | CVE-2024-26185Windows Compressed Folder Tampering | None | Not on CISA's list | 6.5 Medium | 0.30 |
| 8 | CVE-2024-21334Open Management Infrastructure (OMI) Remote Code Execution | None | Not on CISA's list | 9.8 Critical | 0.20 |
| 9 | CVE-2024-21407Windows Hyper-V Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.16 |
| 10 | CVE-2024-26160Windows Cloud Files Mini Filter Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.11 |
| 11 | CVE-2024-21437Windows Graphics Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.08 |
| 12 | CVE-2024-26198Microsoft Exchange Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.07 |
| 13 | CVE-2024-26170Windows Composite Image File System (CimFS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.07 |
| 14 | CVE-2024-26182Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.06 |
| 15 | CVE-2024-21433Windows Print Spooler Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.05 |
| 16 | CVE-2024-21408Windows Hyper-V Denial of Service | None | Not on CISA's list | 5.5 Medium | 0.05 |
| 17 | CVE-2024-21426Microsoft SharePoint Server Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.04 |
| 18 | CVE-2024-21411Skype for Consumer Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.03 |
| 19 | CVE-2024-21438Microsoft AllJoyn API Denial of Service | None | Not on CISA's list | 7.5 High | 0.03 |
| 20 | CVE-2024-26190Microsoft QUIC Denial of Service | None | Not on CISA's list | 7.5 High | 0.03 |
| 21 | CVE-2024-26197Windows Standards-Based Storage Management Service Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.03 |
| 22 | CVE-2024-21435Windows OLE Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 23 | CVE-2024-21440Microsoft ODBC Driver Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 24 | CVE-2024-21441Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 25 | CVE-2024-21444Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 26 | CVE-2024-21450Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 27 | CVE-2024-21451Microsoft ODBC Driver Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 28 | CVE-2024-26159Microsoft ODBC Driver Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 29 | CVE-2024-26161Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 30 | CVE-2024-26162Microsoft ODBC Driver Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 31 | CVE-2024-26164Microsoft Django Backend for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 32 | CVE-2024-26165Visual Studio Code Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.02 |
| 33 | CVE-2024-26166Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 34 | CVE-2024-21421Azure SDK Spoofing | None | Not on CISA's list | 7.5 High | 0.02 |
| 35 | CVE-2024-21427Windows Kerberos Security Feature Bypass | None | Not on CISA's list | 7.5 High | 0.02 |
| 36 | CVE-2024-26204Outlook for Android Information Disclosure | None | Not on CISA's list | 7.5 High | 0.02 |
| 37 | CVE-2024-21418Software for Open Networking in the Cloud (SONiC) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 38 | CVE-2024-21431Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass | None | Not on CISA's list | 7.8 High | 0.01 |
| 39 | CVE-2024-21434Microsoft Windows SCSI Class System File Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 40 | CVE-2024-21436Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 41 | CVE-2024-21442Windows USB Print Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 42 | CVE-2024-21446NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 43 | CVE-2024-26173Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 44 | CVE-2024-26176Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 45 | CVE-2024-26178Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 46 | CVE-2024-26199Microsoft Office Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 47 | CVE-2024-21419Microsoft Dynamics 365 (on-premises) Cross-site Scripting | None | Not on CISA's list | 7.6 High | 0.01 |
| 48 | CVE-2024-21443Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.01 |
| 49 | CVE-2024-26203Azure Data Studio Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.01 |
| 50 | CVE-2024-21390Microsoft Authenticator Elevation of Privilege | None | Not on CISA's list | 7.1 High | 0.01 |
| 51 | CVE-2024-21432Windows Update Stack Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.01 |
| 52 | CVE-2024-21439Windows Telephony Server Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.01 |
| 53 | CVE-2024-21445Windows USB Print Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.01 |
| 54 | CVE-2024-21429Windows USB Hub Driver Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 55 | CVE-2024-20671Microsoft Defender Security Feature Bypass | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 56 | CVE-2024-26174Windows Kernel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 57 | CVE-2024-26177Windows Kernel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 58 | CVE-2024-26181Windows Kernel Denial of Service | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 59 | CVE-2024-21448Microsoft Teams for Android Information Disclosure | None | Not on CISA's list | 5.0 Medium | 0.01 |
By impact
What this page counts
The CVE records Microsoft published as a CVE Numbering Authority on 12 March 2024, the second Tuesday of the month. Microsoft's own release notes can also name CVEs other organisations assigned, such as Chromium's for Edge; those are not counted here.
Titles, CVSS scores and impact words are Microsoft's, from the CVE records. The list of exploited vulnerabilities and the SSVC values are CISA's. EPSS is FIRST's daily score. The order is ours: entries on CISA's list first, in our patch-first order, then CISA's SSVC exploitation value, then EPSS, then CVSS.