Microsoft's security release of 9 July 2024
Patch Tuesday, July 2024, page 2
As of , CISA lists three of the 138 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2024-38112, Windows MSHTML Platform Spoofing.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 101 | CVE-2024-38010Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 102 | CVE-2024-38011Secure Boot Security Feature Bypass | None | Not on CISA's list | 8.0 High | 0.01 |
| 103 | CVE-2024-30079Windows Remote Access Connection Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 104 | CVE-2024-35261Azure Network Watcher VM Extension Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 105 | CVE-2024-38034Windows Filtering Platform Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 106 | CVE-2024-38043PowerShell Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 107 | CVE-2024-38047PowerShell Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 108 | CVE-2024-38050Windows Workstation Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 109 | CVE-2024-38051Windows Graphics Component Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 110 | CVE-2024-38057Kernel Streaming WOW Thunk Service Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 111 | CVE-2024-38066Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 112 | CVE-2024-38070Windows LockDown Policy (WLDP) Security Feature Bypass | None | Not on CISA's list | 7.8 High | 0.01 |
| 113 | CVE-2024-38079Windows Graphics Component Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 114 | CVE-2024-30098Windows Cryptographic Services Security Feature Bypass | None | Not on CISA's list | 7.5 High | 0.01 |
| 115 | CVE-2024-38061DCOM Remote Cross-Session Activation Elevation of Privilege | None | Not on CISA's list | 7.5 High | 0.01 |
| 116 | CVE-2024-38078Xbox Wireless Adapter Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 117 | CVE-2024-30061Microsoft Dynamics 365 (On-Premises) Information Disclosure | None | Not on CISA's list | 7.3 High | 0.01 |
| 118 | CVE-2024-38033PowerShell Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.01 |
| 119 | CVE-2024-38081.NET, .NET Framework, and Visual Studio Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.01 |
| 120 | CVE-2024-38032Microsoft Xbox Remote Code Execution | None | Not on CISA's list | 7.1 High | 0.01 |
| 121 | CVE-2024-38022Windows Image Acquisition Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.01 |
| 122 | CVE-2024-26184Secure Boot Security Feature Bypass | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 123 | CVE-2024-38058BitLocker Security Feature Bypass | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 124 | CVE-2024-38065Secure Boot Security Feature Bypass | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 125 | CVE-2024-38013Microsoft Windows Server Backup Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.01 |
| 126 | CVE-2024-38027Windows Line Printer Daemon Service Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 127 | CVE-2024-38048Windows Network Driver Interface Specification (NDIS) Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 128 | CVE-2024-38101Windows Layer-2 Bridge Network Driver Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 129 | CVE-2024-38102Windows Layer-2 Bridge Network Driver Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 130 | CVE-2024-38105Windows Layer-2 Bridge Network Driver Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 131 | CVE-2024-38086Azure Kinect SDK Remote Code Execution | None | Not on CISA's list | 6.4 Medium | 0.01 |
| 132 | CVE-2024-38099Windows Remote Desktop Licensing Service Denial of Service | None | Not on CISA's list | 5.9 Medium | 0.01 |
| 133 | CVE-2024-38055Microsoft Windows Codecs Library Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 134 | CVE-2024-38056Microsoft Windows Codecs Library Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 135 | CVE-2024-35270Windows iSCSI Service Denial of Service | None | Not on CISA's list | 5.3 Medium | 0.01 |
| 136 | CVE-2024-30071Windows Remote Access Connection Manager Information Disclosure | None | Not on CISA's list | 4.7 Medium | 0.01 |
| 137 | CVE-2024-21417Windows Text Services Framework Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 138 | CVE-2024-38069Windows Enroll Engine Security Feature Bypass | None | Not on CISA's list | 7.0 High | 0.00 |