Microsoft's security release of 9 July 2024
Patch Tuesday, July 2024
As of , CISA lists three of the 138 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2024-38112, Windows MSHTML Platform Spoofing.
On CISA's list of exploited vulnerabilities
- CVE-2024-38112Windows MSHTML Platform Spoofing. Listed by CISA on 9 July 2024, release day
- CVE-2024-38094Microsoft SharePoint Remote Code Execution. Listed by CISA on 22 October 2024, 105 days after the release
- CVE-2024-38080Windows Hyper-V Elevation of Privilege. Listed by CISA on 9 July 2024, release day
The release in numbers
| What | CVEs |
|---|---|
| CVE records Microsoft published | 138 CVEs |
| On CISA's list of exploited vulnerabilities | 3 CVEs |
| CISA's SSVC exploitation: active | 3 CVEs |
| CISA's SSVC exploitation: proof of concept | 2 CVEs |
| CISA's SSVC exploitation: none | 133 CVEs |
| Not assessed by CISA's SSVC | none |
| Critical by CVSS (9.0 or more) | 4 CVEs |
| EPSS 0.10 or more | 10 CVEs |
Patch first: the release in our order
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 1 | CVE-2024-38112Windows MSHTML Platform Spoofing | Active | Patch this weekListed | 7.5 High | 0.84 |
| 2 | CVE-2024-38094Microsoft SharePoint Remote Code Execution | Active | Patch this weekListed | 7.2 High | 0.51 |
| 3 | CVE-2024-38080Windows Hyper-V Elevation of Privilege | Active | Patch soonListed | 7.8 High | 0.07 |
| 4 | CVE-2024-38100Windows File Explorer Elevation of Privilege | Proof of concept | Not on CISA's list | 7.8 High | 0.05 |
| 5 | CVE-2024-38017Microsoft Message Queuing Information Disclosure | Proof of concept | Not on CISA's list | 5.5 Medium | 0.01 |
| 6 | CVE-2024-38077Windows Remote Desktop Licensing Service Remote Code Execution | None | Not on CISA's list | 9.8 Critical | 0.84 |
| 7 | CVE-2024-38023Microsoft SharePoint Server Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.53 |
| 8 | CVE-2024-38030Windows Themes Spoofing | None | Not on CISA's list | 6.5 Medium | 0.51 |
| 9 | CVE-2024-38024Microsoft SharePoint Server Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.45 |
| 10 | CVE-2024-38071Windows Remote Desktop Licensing Service Denial of Service | None | Not on CISA's list | 7.5 High | 0.36 |
| 11 | CVE-2024-30081Windows NTLM Spoofing | None | Not on CISA's list | 7.1 High | 0.24 |
| 12 | CVE-2024-38060Windows Imaging Component Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.16 |
| 13 | CVE-2024-38054Kernel Streaming WOW Thunk Service Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.10 |
| 14 | CVE-2024-38052Kernel Streaming WOW Thunk Service Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.07 |
| 15 | CVE-2024-38085Windows Graphics Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.05 |
| 16 | CVE-2024-38059Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.04 |
| 17 | CVE-2024-38021Microsoft Outlook Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.03 |
| 18 | CVE-2024-35264.NET and Visual Studio Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.03 |
| 19 | CVE-2024-30105.NET and Visual Studio Denial of Service | None | Not on CISA's list | 7.5 High | 0.03 |
| 20 | CVE-2024-38031Windows Online Certificate Status Protocol (OCSP) Server Denial of Service | None | Not on CISA's list | 7.5 High | 0.03 |
| 21 | CVE-2024-38067Windows Online Certificate Status Protocol (OCSP) Server Denial of Service | None | Not on CISA's list | 7.5 High | 0.03 |
| 22 | CVE-2024-38068Windows Online Certificate Status Protocol (OCSP) Server Denial of Service | None | Not on CISA's list | 7.5 High | 0.03 |
| 23 | CVE-2024-38095.NET and Visual Studio Denial of Service | None | Not on CISA's list | 7.5 High | 0.03 |
| 24 | CVE-2024-38074Windows Remote Desktop Licensing Service Remote Code Execution | None | Not on CISA's list | 9.8 Critical | 0.02 |
| 25 | CVE-2024-38076Windows Remote Desktop Licensing Service Remote Code Execution | None | Not on CISA's list | 9.8 Critical | 0.02 |
| 26 | CVE-2024-20701SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 27 | CVE-2024-21308SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 28 | CVE-2024-21317SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 29 | CVE-2024-21331SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 30 | CVE-2024-21332SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 31 | CVE-2024-21333SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 32 | CVE-2024-21335SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 33 | CVE-2024-21373SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 34 | CVE-2024-21398SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 35 | CVE-2024-21414SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 36 | CVE-2024-21415SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 37 | CVE-2024-21425SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 38 | CVE-2024-21428SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 39 | CVE-2024-21449SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 40 | CVE-2024-28928SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 41 | CVE-2024-30013Windows MultiPoint Services Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 42 | CVE-2024-35256SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 43 | CVE-2024-35271SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 44 | CVE-2024-35272SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 45 | CVE-2024-37318SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 46 | CVE-2024-37319SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 47 | CVE-2024-37320SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 48 | CVE-2024-37321SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 49 | CVE-2024-37322SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 50 | CVE-2024-37323SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 51 | CVE-2024-37324SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 52 | CVE-2024-37326SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 53 | CVE-2024-37327SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 54 | CVE-2024-37328SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 55 | CVE-2024-37329SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 56 | CVE-2024-37330SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 57 | CVE-2024-37331SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 58 | CVE-2024-37332SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 59 | CVE-2024-37333SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 60 | CVE-2024-37334Microsoft OLE DB Driver for SQL Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 61 | CVE-2024-37336SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 62 | CVE-2024-38087SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 63 | CVE-2024-38088SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 64 | CVE-2024-38092Azure CycleCloud Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.02 |
| 65 | CVE-2024-38104Windows Fax Service Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.02 |
| 66 | CVE-2024-38062Windows Kernel-Mode Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.02 |
| 67 | CVE-2024-35266Azure DevOps Server Spoofing | None | Not on CISA's list | 7.6 High | 0.02 |
| 68 | CVE-2024-35267Azure DevOps Server Spoofing | None | Not on CISA's list | 7.6 High | 0.02 |
| 69 | CVE-2024-32987Microsoft SharePoint Server Information Disclosure | None | Not on CISA's list | 7.5 High | 0.02 |
| 70 | CVE-2024-38015Windows Remote Desktop Gateway (RD Gateway) Denial of Service | None | Not on CISA's list | 7.5 High | 0.02 |
| 71 | CVE-2024-38064Windows TCP/IP Information Disclosure | None | Not on CISA's list | 7.5 High | 0.02 |
| 72 | CVE-2024-38072Windows Remote Desktop Licensing Service Denial of Service | None | Not on CISA's list | 7.5 High | 0.02 |
| 73 | CVE-2024-38073Windows Remote Desktop Licensing Service Denial of Service | None | Not on CISA's list | 7.5 High | 0.02 |
| 74 | CVE-2024-38091Microsoft WS-Discovery Denial of Service | None | Not on CISA's list | 7.5 High | 0.02 |
| 75 | CVE-2024-38019Microsoft Windows Performance Data Helper Library Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.02 |
| 76 | CVE-2024-38025Microsoft Windows Performance Data Helper Library Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.02 |
| 77 | CVE-2024-38028Microsoft Windows Performance Data Helper Library Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.02 |
| 78 | CVE-2024-38044DHCP Server Service Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.02 |
| 79 | CVE-2024-38049Windows Distributed Transaction Coordinator Remote Code Execution | None | Not on CISA's list | 6.6 Medium | 0.02 |
| 80 | CVE-2024-38020Microsoft Outlook Spoofing | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 81 | CVE-2024-38041Windows Kernel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.02 |
| 82 | CVE-2024-38089Microsoft Defender for IoT Elevation of Privilege | None | Not on CISA's list | 9.1 Critical | 0.01 |
| 83 | CVE-2024-21303SQL Server Native Client OLE DB Provider Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 84 | CVE-2024-28899Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.8 High | 0.01 |
| 85 | CVE-2024-37973Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.8 High | 0.01 |
| 86 | CVE-2024-38053Windows Layer-2 Bridge Network Driver Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 87 | CVE-2024-37984Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.4 High | 0.01 |
| 88 | CVE-2024-37969Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 89 | CVE-2024-37970Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 90 | CVE-2024-37971Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 91 | CVE-2024-37972Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 92 | CVE-2024-37974Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 93 | CVE-2024-37975Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 94 | CVE-2024-37977Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 95 | CVE-2024-37978Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 96 | CVE-2024-37981Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 97 | CVE-2024-37986Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 98 | CVE-2024-37987Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 99 | CVE-2024-37988Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 100 | CVE-2024-37989Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
By impact
What this page counts
The CVE records Microsoft published as a CVE Numbering Authority on 9 July 2024, the second Tuesday of the month. Microsoft's own release notes can also name CVEs other organisations assigned, such as Chromium's for Edge; those are not counted here.
Titles, CVSS scores and impact words are Microsoft's, from the CVE records. The list of exploited vulnerabilities and the SSVC values are CISA's. EPSS is FIRST's daily score. The order is ours: entries on CISA's list first, in our patch-first order, then CISA's SSVC exploitation value, then EPSS, then CVSS.