Microsoft's security release of 8 October 2024
Patch Tuesday, October 2024, page 2
As of , CISA lists three of the 117 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2024-43468, Microsoft Configuration Manager Remote Code Execution.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 101 | CVE-2024-43571Sudo for Windows Spoofing | None | Not on CISA's list | 5.6 Medium | 0.01 |
| 102 | CVE-2024-43500Windows Resilient File System (ReFS) Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 103 | CVE-2024-43508Windows Graphics Component Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 104 | CVE-2024-43554Windows Kernel-Mode Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 105 | CVE-2024-43603Visual Studio Collector Service Denial of Service | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 106 | CVE-2024-43614Microsoft Defender for Endpoint for Linux Spoofing | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 107 | CVE-2024-43520Windows Kernel Denial of Service | None | Not on CISA's list | 5.0 Medium | 0.01 |
| 108 | CVE-2024-43456Windows Remote Desktop Services Tampering | None | Not on CISA's list | 4.8 Medium | 0.01 |
| 109 | CVE-2024-38179Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.00 |
| 110 | CVE-2024-43563Windows Ancillary Function Driver for WinSock Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 111 | CVE-2024-43576Microsoft Office Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.00 |
| 112 | CVE-2024-43590Visual C++ Redistributable Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 113 | CVE-2024-43553NT OS Kernel Elevation of Privilege | None | Not on CISA's list | 7.4 High | 0.00 |
| 114 | CVE-2024-43511Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 115 | CVE-2024-43522Windows Local Security Authority (LSA) Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 116 | CVE-2024-43570Windows Kernel Elevation of Privilege | None | Not on CISA's list | 6.4 Medium | 0.00 |
| 117 | CVE-2024-43585Code Integrity Guard Security Feature Bypass | None | Not on CISA's list | 5.5 Medium | 0.00 |