Microsoft's security release of 14 May 2024
Patch Tuesday, May 2024
As of , CISA lists two of the 59 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2024-30051, Windows DWM Core Library Elevation of Privilege.
On CISA's list of exploited vulnerabilities
- CVE-2024-30051Windows DWM Core Library Elevation of Privilege. Listed by CISA on 14 May 2024, release day
- CVE-2024-30040Windows MSHTML Platform Security Feature Bypass. Listed by CISA on 14 May 2024, release day
The release in numbers
| What | CVEs |
|---|---|
| CVE records Microsoft published | 59 CVEs |
| On CISA's list of exploited vulnerabilities | 2 CVEs |
| CISA's SSVC exploitation: active | 2 CVEs |
| CISA's SSVC exploitation: proof of concept | 2 CVEs |
| CISA's SSVC exploitation: none | 55 CVEs |
| Not assessed by CISA's SSVC | none |
| Critical by CVSS (9.0 or more) | none |
| EPSS 0.10 or more | 3 CVEs |
Patch first: the release in our order
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 1 | CVE-2024-30051Windows DWM Core Library Elevation of Privilege | Active | Patch this weekListed | 7.8 High | 0.06 |
| 2 | CVE-2024-30040Windows MSHTML Platform Security Feature Bypass | Active | Patch soonListed | 8.8 High | 0.04 |
| 3 | CVE-2024-30053Azure Migrate Cross-Site Scripting | Proof of concept | Not on CISA's list | 6.5 Medium | 0.01 |
| 4 | CVE-2024-30059Microsoft Intune for Android Mobile Application Management Tampering | Proof of concept | Not on CISA's list | 6.1 Medium | 0.01 |
| 5 | CVE-2024-30044Microsoft SharePoint Server Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.84 |
| 6 | CVE-2024-30043Microsoft SharePoint Server Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.56 |
| 7 | CVE-2024-30050Windows Mark of the Web Security Feature Bypass | None | Not on CISA's list | 5.4 Medium | 0.11 |
| 8 | CVE-2024-30034Windows Cloud Files Mini Filter Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.07 |
| 9 | CVE-2024-30032Windows DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.05 |
| 10 | CVE-2024-30037Windows Common Log File System Driver Elevation of Privilege | None | Not on CISA's list | 5.5 Medium | 0.05 |
| 11 | CVE-2024-30025Windows Common Log File System Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.04 |
| 12 | CVE-2024-30035Windows DWM Core Library Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.04 |
| 13 | CVE-2024-29996Windows Common Log File System Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.03 |
| 14 | CVE-2024-30038Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.03 |
| 15 | CVE-2024-30011Windows Hyper-V Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.03 |
| 16 | CVE-2024-30019DHCP Server Service Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.03 |
| 17 | CVE-2024-30006Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 18 | CVE-2024-30009Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 19 | CVE-2024-30010Windows Hyper-V Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 20 | CVE-2024-30017Windows Hyper-V Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 21 | CVE-2024-30042Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.02 |
| 22 | CVE-2024-30022Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.02 |
| 23 | CVE-2024-30023Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.02 |
| 24 | CVE-2024-30024Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.02 |
| 25 | CVE-2024-30036Windows Deployment Services Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 26 | CVE-2024-30054Microsoft Power BI Client JavaScript SDK Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 27 | CVE-2024-30046Visual Studio Denial of Service | None | Not on CISA's list | 5.9 Medium | 0.02 |
| 28 | CVE-2024-30007Microsoft Brokering File System Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.01 |
| 29 | CVE-2024-30020Windows Cryptographic Services Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 30 | CVE-2024-26238Microsoft PLUGScheduler Scheduled Task Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 31 | CVE-2024-29994Microsoft Windows SCSI Class System File Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 32 | CVE-2024-30018Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 33 | CVE-2024-30027NTFS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 34 | CVE-2024-30028Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 35 | CVE-2024-30030Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 36 | CVE-2024-30049Windows Win32 Kernel Subsystem Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 37 | CVE-2024-30047Dynamics 365 Customer Insights Spoofing | None | Not on CISA's list | 7.6 High | 0.01 |
| 38 | CVE-2024-30048Dynamics 365 Customer Insights Spoofing | None | Not on CISA's list | 7.6 High | 0.01 |
| 39 | CVE-2024-30014Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 40 | CVE-2024-30015Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 41 | CVE-2024-30029Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 42 | CVE-2024-30033Windows Search Service Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.01 |
| 43 | CVE-2024-29997Windows Mobile Broadband Driver Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 44 | CVE-2024-29998Windows Mobile Broadband Driver Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 45 | CVE-2024-29999Windows Mobile Broadband Driver Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 46 | CVE-2024-30000Windows Mobile Broadband Driver Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 47 | CVE-2024-30001Windows Mobile Broadband Driver Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 48 | CVE-2024-30002Windows Mobile Broadband Driver Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 49 | CVE-2024-30003Windows Mobile Broadband Driver Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 50 | CVE-2024-30004Windows Mobile Broadband Driver Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 51 | CVE-2024-30005Windows Mobile Broadband Driver Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 52 | CVE-2024-30012Windows Mobile Broadband Driver Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 53 | CVE-2024-30021Windows Mobile Broadband Driver Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 54 | CVE-2024-30045.NET and Visual Studio Remote Code Execution | None | Not on CISA's list | 6.3 Medium | 0.01 |
| 55 | CVE-2024-30008Windows DWM Core Library Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 56 | CVE-2024-30016Windows Cryptographic Services Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 57 | CVE-2024-30039Windows Remote Access Connection Manager Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 58 | CVE-2024-30041Microsoft Bing Search Spoofing | None | Not on CISA's list | 5.4 Medium | 0.01 |
| 59 | CVE-2024-30031Windows CNG Key Isolation Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
By impact
What this page counts
The CVE records Microsoft published as a CVE Numbering Authority on 14 May 2024, the second Tuesday of the month. Microsoft's own release notes can also name CVEs other organisations assigned, such as Chromium's for Edge; those are not counted here.
Titles, CVSS scores and impact words are Microsoft's, from the CVE records. The list of exploited vulnerabilities and the SSVC values are CISA's. EPSS is FIRST's daily score. The order is ours: entries on CISA's list first, in our patch-first order, then CISA's SSVC exploitation value, then EPSS, then CVSS.