Microsoft's security release of 9 April 2024
Patch Tuesday, April 2024, page 2
As of , CISA lists one of the 147 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2024-29988, SmartScreen Prompt Security Feature Bypass.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 101 | CVE-2024-29061Secure Boot Security Feature Bypass | None | Not on CISA's list | 7.8 High | 0.01 |
| 102 | CVE-2024-26248Windows Kerberos Elevation of Privilege | None | Not on CISA's list | 7.5 High | 0.01 |
| 103 | CVE-2024-28896Secure Boot Security Feature Bypass | None | Not on CISA's list | 7.5 High | 0.01 |
| 104 | CVE-2024-26216Windows File Server Resource Management Service Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.01 |
| 105 | CVE-2024-26232Microsoft Message Queuing (MSMQ) Remote Code Execution | None | Not on CISA's list | 7.3 High | 0.01 |
| 106 | CVE-2024-29063Azure AI Search Information Disclosure | None | Not on CISA's list | 7.3 High | 0.01 |
| 107 | CVE-2024-29066Windows Distributed File System (DFS) Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.01 |
| 108 | CVE-2024-20688Secure Boot Security Feature Bypass | None | Not on CISA's list | 7.1 High | 0.01 |
| 109 | CVE-2024-20689Secure Boot Security Feature Bypass | None | Not on CISA's list | 7.1 High | 0.01 |
| 110 | CVE-2024-29062Secure Boot Security Feature Bypass | None | Not on CISA's list | 7.1 High | 0.01 |
| 111 | CVE-2024-26213Microsoft Brokering File System Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.01 |
| 112 | CVE-2024-26168Secure Boot Security Feature Bypass | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 113 | CVE-2024-26251Microsoft SharePoint Server Spoofing | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 114 | CVE-2024-26252Windows rndismp6.sys Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 115 | CVE-2024-26253Windows rndismp6.sys Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 116 | CVE-2024-28897Secure Boot Security Feature Bypass | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 117 | CVE-2024-20669Secure Boot Security Feature Bypass | None | Not on CISA's list | 6.7 Medium | 0.01 |
| 118 | CVE-2024-26171Secure Boot Security Feature Bypass | None | Not on CISA's list | 6.7 Medium | 0.01 |
| 119 | CVE-2024-26250Secure Boot Security Feature Bypass | None | Not on CISA's list | 6.7 Medium | 0.01 |
| 120 | CVE-2024-28903Secure Boot Security Feature Bypass | None | Not on CISA's list | 6.7 Medium | 0.01 |
| 121 | CVE-2024-28919Secure Boot Security Feature Bypass | None | Not on CISA's list | 6.7 Medium | 0.01 |
| 122 | CVE-2024-28921Secure Boot Security Feature Bypass | None | Not on CISA's list | 6.7 Medium | 0.01 |
| 123 | CVE-2024-28924Secure Boot Security Feature Bypass | None | Not on CISA's list | 6.7 Medium | 0.01 |
| 124 | CVE-2024-26193Azure Migrate Remote Code Execution | None | Not on CISA's list | 6.4 Medium | 0.01 |
| 125 | CVE-2024-28898Secure Boot Security Feature Bypass | None | Not on CISA's list | 6.3 Medium | 0.01 |
| 126 | CVE-2024-28917Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege | None | Not on CISA's list | 6.2 Medium | 0.01 |
| 127 | CVE-2024-29064Windows Hyper-V Denial of Service | None | Not on CISA's list | 6.2 Medium | 0.01 |
| 128 | CVE-2024-20665BitLocker Security Feature Bypass | None | Not on CISA's list | 6.1 Medium | 0.01 |
| 129 | CVE-2024-26172Windows DWM Core Library Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 130 | CVE-2024-26207Windows Remote Access Connection Manager Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 131 | CVE-2024-26217Windows Remote Access Connection Manager Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 132 | CVE-2024-26255Windows Remote Access Connection Manager Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 133 | CVE-2024-28900Windows Remote Access Connection Manager Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 134 | CVE-2024-28901Windows Remote Access Connection Manager Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 135 | CVE-2024-28902Windows Remote Access Connection Manager Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 136 | CVE-2024-29992Azure Identity Library for .NET Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 137 | CVE-2024-26220Windows Mobile Hotspot Information Disclosure | None | Not on CISA's list | 5.0 Medium | 0.01 |
| 138 | CVE-2024-29056Windows Authentication Elevation of Privilege | None | Not on CISA's list | 4.3 Medium | 0.01 |
| 139 | CVE-2024-28922Secure Boot Security Feature Bypass | None | Not on CISA's list | 4.1 Medium | 0.01 |
| 140 | CVE-2024-26228Windows Cryptographic Services Security Feature Bypass | None | Not on CISA's list | 7.8 High | 0.00 |
| 141 | CVE-2024-28904Microsoft Brokering File System Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 142 | CVE-2024-28905Microsoft Brokering File System Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 143 | CVE-2024-26194Secure Boot Security Feature Bypass | None | Not on CISA's list | 7.4 High | 0.00 |
| 144 | CVE-2024-26236Windows Update Stack Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 145 | CVE-2024-26242Windows Telephony Server Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 146 | CVE-2024-26243Windows USB Print Driver Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 147 | CVE-2024-28923Secure Boot Security Feature Bypass | None | Not on CISA's list | 6.4 Medium | 0.00 |