Microsoft's security release of 9 April 2024
Patch Tuesday, April 2024
As of , CISA lists one of the 147 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2024-29988, SmartScreen Prompt Security Feature Bypass.
On CISA's list of exploited vulnerabilities
- CVE-2024-29988SmartScreen Prompt Security Feature Bypass. Listed by CISA on 30 April 2024, 21 days after the release
The release in numbers
| What | CVEs |
|---|---|
| CVE records Microsoft published | 147 CVEs |
| On CISA's list of exploited vulnerabilities | 1 CVE |
| CISA's SSVC exploitation: active | 1 CVE |
| CISA's SSVC exploitation: proof of concept | 5 CVEs |
| CISA's SSVC exploitation: none | 141 CVEs |
| Not assessed by CISA's SSVC | none |
| Critical by CVSS (9.0 or more) | 1 CVE |
| EPSS 0.10 or more | 8 CVEs |
Patch first: the release in our order
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 1 | CVE-2024-29988SmartScreen Prompt Security Feature Bypass | Active | Patch soonListed | 8.8 High | 0.45 |
| 2 | CVE-2024-26230Windows Telephony Server Elevation of Privilege | Proof of concept | Not on CISA's list | 7.8 High | 0.24 |
| 3 | CVE-2024-26218Windows Kernel Elevation of Privilege | Proof of concept | Not on CISA's list | 7.8 High | 0.13 |
| 4 | CVE-2024-26229Windows CSC Service Elevation of Privilege | Proof of concept | Not on CISA's list | 7.8 High | 0.09 |
| 5 | CVE-2024-29053Microsoft Defender for IoT Remote Code Execution | Proof of concept | Not on CISA's list | 8.8 High | 0.03 |
| 6 | CVE-2024-28938Microsoft ODBC Driver for SQL Server Remote Code Execution | Proof of concept | Not on CISA's list | 8.8 High | 0.02 |
| 7 | CVE-2024-26256Libarchive Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.88 |
| 8 | CVE-2024-26212DHCP Server Service Denial of Service | None | Not on CISA's list | 7.5 High | 0.63 |
| 9 | CVE-2024-29990Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege | None | Not on CISA's list | 9.0 Critical | 0.18 |
| 10 | CVE-2024-26209Microsoft Local Security Authority Subsystem Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.15 |
| 11 | CVE-2024-26158Microsoft Install Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.12 |
| 12 | CVE-2024-20685Azure Private 5G Core Denial of Service | None | Not on CISA's list | 5.9 Medium | 0.06 |
| 13 | CVE-2024-26234Proxy Driver Spoofing | None | Not on CISA's list | 6.7 Medium | 0.05 |
| 14 | CVE-2024-26211Windows Remote Access Connection Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.04 |
| 15 | CVE-2024-20678Remote Procedure Call Runtime Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.03 |
| 16 | CVE-2024-21323Microsoft Defender for IoT Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.03 |
| 17 | CVE-2024-28910Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.03 |
| 18 | CVE-2024-26215DHCP Server Service Denial of Service | None | Not on CISA's list | 7.5 High | 0.03 |
| 19 | CVE-2024-26219HTTP.sys Denial of Service | None | Not on CISA's list | 7.5 High | 0.03 |
| 20 | CVE-2024-26254Microsoft Virtual Machine Bus (VMBus) Denial of Service | None | Not on CISA's list | 7.5 High | 0.03 |
| 21 | CVE-2024-21409.NET, .NET Framework, and Visual Studio Remote Code Execution | None | Not on CISA's list | 7.3 High | 0.03 |
| 22 | CVE-2024-21322Microsoft Defender for IoT Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.03 |
| 23 | CVE-2024-26179Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 24 | CVE-2024-26200Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 25 | CVE-2024-26205Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 26 | CVE-2024-26210Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 27 | CVE-2024-26214Microsoft WDAC SQL Server ODBC Driver Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 28 | CVE-2024-26244Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 29 | CVE-2024-28906Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 30 | CVE-2024-28908Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 31 | CVE-2024-28909Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 32 | CVE-2024-28911Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 33 | CVE-2024-28912Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 34 | CVE-2024-28913Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 35 | CVE-2024-28914Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 36 | CVE-2024-28915Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 37 | CVE-2024-28926Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 38 | CVE-2024-28927Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 39 | CVE-2024-28929Microsoft ODBC Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 40 | CVE-2024-28930Microsoft ODBC Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 41 | CVE-2024-28931Microsoft ODBC Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 42 | CVE-2024-28932Microsoft ODBC Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 43 | CVE-2024-28933Microsoft ODBC Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 44 | CVE-2024-28934Microsoft ODBC Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 45 | CVE-2024-28935Microsoft ODBC Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 46 | CVE-2024-28936Microsoft ODBC Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 47 | CVE-2024-28937Microsoft ODBC Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 48 | CVE-2024-28939Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 49 | CVE-2024-28940Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 50 | CVE-2024-28941Microsoft ODBC Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 51 | CVE-2024-28942Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 52 | CVE-2024-28943Microsoft ODBC Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 53 | CVE-2024-28944Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 54 | CVE-2024-28945Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 55 | CVE-2024-29043Microsoft ODBC Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 56 | CVE-2024-29044Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 57 | CVE-2024-29046Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 58 | CVE-2024-29047Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 59 | CVE-2024-29048Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 60 | CVE-2024-29982Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 61 | CVE-2024-29983Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 62 | CVE-2024-29984Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 63 | CVE-2024-29985Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 64 | CVE-2024-29993Azure CycleCloud Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.02 |
| 65 | CVE-2024-20670Outlook for Windows Spoofing | None | Not on CISA's list | 8.1 High | 0.02 |
| 66 | CVE-2024-29045Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.02 |
| 67 | CVE-2024-21324Microsoft Defender for IoT Elevation of Privilege | None | Not on CISA's list | 7.2 High | 0.02 |
| 68 | CVE-2024-26195DHCP Server Service Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.02 |
| 69 | CVE-2024-26202DHCP Server Service Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.02 |
| 70 | CVE-2024-26208Microsoft Message Queuing (MSMQ) Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.02 |
| 71 | CVE-2024-26221Windows DNS Server Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.02 |
| 72 | CVE-2024-26222Windows DNS Server Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.02 |
| 73 | CVE-2024-26223Windows DNS Server Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.02 |
| 74 | CVE-2024-26224Windows DNS Server Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.02 |
| 75 | CVE-2024-26227Windows DNS Server Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.02 |
| 76 | CVE-2024-26231Windows DNS Server Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.02 |
| 77 | CVE-2024-26233Windows DNS Server Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.02 |
| 78 | CVE-2024-29054Microsoft Defender for IoT Elevation of Privilege | None | Not on CISA's list | 7.2 High | 0.02 |
| 79 | CVE-2024-29055Microsoft Defender for IoT Elevation of Privilege | None | Not on CISA's list | 7.2 High | 0.02 |
| 80 | CVE-2024-21424Azure Compute Gallery Elevation of Privilege | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 81 | CVE-2024-26183Windows Kerberos Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 82 | CVE-2024-26226Windows Distributed File System (DFS) Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 83 | CVE-2024-29050Windows Cryptographic Services Remote Code Execution | None | Not on CISA's list | 8.4 High | 0.01 |
| 84 | CVE-2024-29989Azure Monitor Agent Elevation of Privilege | None | Not on CISA's list | 8.4 High | 0.01 |
| 85 | CVE-2024-26180Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 86 | CVE-2024-26189Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 87 | CVE-2024-26240Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 88 | CVE-2024-28925Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 89 | CVE-2024-20693Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 90 | CVE-2024-21447Windows Authentication Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 91 | CVE-2024-26175Secure Boot Security Feature Bypass | None | Not on CISA's list | 7.8 High | 0.01 |
| 92 | CVE-2024-26235Windows Update Stack Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 93 | CVE-2024-26237Windows Defender Credential Guard Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 94 | CVE-2024-26239Windows Telephony Server Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 95 | CVE-2024-26241Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 96 | CVE-2024-26245Windows SMB Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 97 | CVE-2024-26257Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 98 | CVE-2024-28907Microsoft Brokering File System Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 99 | CVE-2024-28920Secure Boot Security Feature Bypass | None | Not on CISA's list | 7.8 High | 0.01 |
| 100 | CVE-2024-29052Windows Storage Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
By impact
What this page counts
The CVE records Microsoft published as a CVE Numbering Authority on 9 April 2024, the second Tuesday of the month. Microsoft's own release notes can also name CVEs other organisations assigned, such as Chromium's for Edge; those are not counted here.
Titles, CVSS scores and impact words are Microsoft's, from the CVE records. The list of exploited vulnerabilities and the SSVC values are CISA's. EPSS is FIRST's daily score. The order is ours: entries on CISA's list first, in our patch-first order, then CISA's SSVC exploitation value, then EPSS, then CVSS.