Report Name: Microsoft Patch Tuesday, July 2024
Generated: 2024-07-10 00:17:18

Product Name	Prevalence	U	C	H	M	L	A	Comment
Microsoft Message Queuing	0.9			1			1	Microsoft Message Queuing or MSMQ is a message queue implementation developed by Microsoft and deployed in its Windows Server operating systems since Windows NT 4 and Windows 95
Windows Kernel	0.9				1		1	Windows Kernel
Windows NTLM	0.9				1		1	A suite of security protocols to authenticate users' identity and protect the integrity and confidentiality of their activity
Windows TCP/IP	0.9				1		1	Windows component
Windows Win32k	0.9				2		2	The Win32k.sys driver is the kernel side of some core parts of the Windows subsystem. Its main functionality is the GUI of Windows; it's responsible for window management.
.NET Core and Visual Studio	0.8				1		1	.NET Core and Visual Studio
BitLocker	0.8				1		1	A full volume encryption feature included with Microsoft Windows versions starting with Windows Vista
Chromium	0.8			6	20		26	Chromium is a free and open-source web browser project, mainly developed and maintained by Google
Microsoft Defender for IoT	0.8				1		1	Microsoft Defender for IoT provides comprehensive threat detection for IoT/OT environments
Microsoft Edge	0.8			1	4		5	Web browser
Microsoft Office	0.8			1			1	Microsoft Office is a suite of applications designed to help with productivity and completing common tasks on a computer
Microsoft PowerShell	0.8				3		3	PowerShell or Microsoft PowerShell (formerly Windows PowerShell) is a task automation and configuration management program from Microsoft, consisting of a command-line shell and the associated scripting language
Microsoft Windows Codecs Library	0.8				2		2	Windows component
Microsoft Windows Performance Data Helper Library	0.8				3		3	Windows component
Microsoft Windows Server Backup	0.8				1		1	Windows component
Secure Boot	0.8			1	19		20	Secure boot is a security standard developed by members of the PC industry to help make sure that a device boots using only software that is trusted by the Original Equipment Manufacturer (OEM)
Windows Cryptographic Services	0.8				1		1	Windows component
Windows Distributed Transaction Coordinator	0.8				1		1	Windows component
Windows Enroll Engine	0.8				1		1	Windows component
Windows Fax Service	0.8			1			1	Windows component
Windows File Explorer	0.8				1		1	Windows component
Windows Filtering Platform	0.8				1		1	Windows component
Windows Graphics Component	0.8			1	2		3	Windows component
Windows Image Acquisition	0.8				1		1	Windows component
Windows Imaging Component	0.8			1			1	Windows component
Windows Kernel-Mode Driver	0.8				1		1	Windows component
Windows Layer-2 Bridge Network Driver	0.8			1	3		4	Windows component
Windows Line Printer Daemon Service	0.8				1		1	Windows component
Windows LockDown Policy (WLDP)	0.8				1		1	Windows component
Windows MSHTML Platform	0.8		1				1	Windows component
Windows MultiPoint Services	0.8			1			1	Windows component
Windows Network Driver Interface Specification (NDIS)	0.8				1		1	Windows component
Windows Online Certificate Status Protocol (OCSP) Server	0.8				3		3	Windows component
Windows Remote Access Connection Manager	0.8				2		2	Windows component
Windows Remote Desktop Gateway (RD Gateway)	0.8				1		1	Windows component
Windows Remote Desktop Licensing Service	0.8			3	4		7	Windows component
Windows Text Services Framework	0.8				1		1	Windows component
Windows Themes	0.8				1		1	Windows component
Windows Workstation Service	0.8				1		1	Windows component
Windows iSCSI Service	0.8				1		1	Windows component
.NET and Visual Studio	0.7				2		2	.NET and Visual Studio
Microsoft SharePoint	0.7				1		1	Microsoft SharePoint
Microsoft Outlook	0.6				1		1	Microsoft Outlook is a personal information manager software system from Microsoft, available as a part of the Microsoft 365 software suites
Windows Hyper-V	0.6			1			1	Hardware virtualization component of the client editions of Windows NT
.NET, .NET Framework, and Visual Studio	0.5				1		1	.NET, .NET Framework, and Visual Studio
Azure CycleCloud	0.5			1			1	Azure CycleCloud
Azure DevOps Server	0.5				2		2	Azure DevOps Server
Azure Kinect SDK	0.5				1		1	Azure Kinect SDK
Azure Network Watcher VM Extension	0.5			1			1	Azure Network Watcher VM Extension
CERT/CC: CVE-2024-3596 RADIUS Protocol	0.5			1			1	CERT/CC: CVE-2024-3596 RADIUS Protocol
DCOM Remote Cross-Session Activation	0.5				1		1	DCOM Remote Cross-Session Activation
DHCP Server Service	0.5				1		1	DHCP Server Service
Github: CVE-2024-38517 TenCent RapidJSON	0.5				1		1	Github: CVE-2024-38517 TenCent RapidJSON
Github: CVE-2024-39684 TenCent RapidJSON	0.5				1		1	Github: CVE-2024-39684 TenCent RapidJSON
Kernel Streaming WOW Thunk Service Driver	0.5				3		3	Kernel Streaming WOW Thunk Service Driver
Microsoft Dynamics 365 (On-Premises)	0.5				1		1	Microsoft Dynamics 365 (On-Premises)
Microsoft Edge for iOS	0.5				1		1	Microsoft Edge for iOS
Microsoft OLE DB Driver for SQL Server	0.5				1		1	Microsoft OLE DB Driver for SQL Server
Microsoft SharePoint Server	0.5				3		3	Microsoft SharePoint Server
Microsoft WS-Discovery	0.5				1		1	Microsoft WS-Discovery
Microsoft Xbox	0.5				1		1	Microsoft Xbox
SQL Server Native Client OLE DB Provider	0.5				37		37	SQL Server Native Client OLE DB Provider
Xbox Wireless Adapter	0.5				1		1	Xbox Wireless Adapter
Microsoft Dataverse	0.2				1		1	Microsoft Dataverse
Unknown Product	0					1	1	Unknown Product

Vulnerability Type	Criticality	U	C	H	M	L	A
Remote Code Execution	1.0			13	51		64
Security Feature Bypass	0.9			4	23		27
Elevation of Privilege	0.85			3	23		26
Information Disclosure	0.83			1	7		8
Denial of Service	0.7				17		17
Memory Corruption	0.5				20		20
Spoofing	0.4		1	1	10		12
Unknown Vulnerability Type	0					1	1

Source	U	C	H	M	L	A
MS PT Extended			7	26		33
Qualys		1	6	12	1	20
Tenable		1	3	41		45
Rapid7		1	5	1		7
ZDI		1	3	1		5

Urgent (0)

Critical (1)

1. Spoofing - Windows MSHTML Platform (CVE-2024-38112) - Critical [635]

Description: Windows MSHTML Platform Spoofing Vulnerability

Qualys: CVE-2024-38112: Windows MSHTML Platform Spoofing Vulnerability Windows MSHTML is a browser engine that renders web pages frequently connected to Internet Explorer. Even though the Internet Explorer (IE) 11 desktop application has reached the end of support, MSHTML vulnerabilities are still relevant today and are being patched by Microsoft. An attacker must send the victim a malicious file and convince the victim to execute it.

Tenable: Microsoft’s July 2024 Patch Tuesday Addresses 138 CVEs (CVE-2024-38080, CVE-2024-38112)

Tenable: CVE-2024-38112 | Windows MSHTML Platform Spoofing Vulnerability

Tenable: CVE-2024-38112 is a spoofing vulnerability in Windows MSHTML. It was assigned a CVSSv3 score of 7.5 and is rated important. An unauthenticated, remote attacker could exploit this vulnerability by convincing a potential target to open a malicious file. Microsoft notes that in order to successfully exploit this flaw, an attacker would also need to take “additional actions” to “prepare the target environment.”

Rapid7: Microsoft is addressing 139 vulnerabilities this July 2024 Patch Tuesday, which is on the high side in terms of typical CVE counts. They’ve also republished details for 4 CVEs issued by other vendors that affect Microsoft products. Microsoft has evidence of in-the-wild exploitation for 2 of the vulnerabilities published today. At time of writing, none of the vulnerabilities patched today are listed in CISA’s Known Exploited Vulnerabilities catalog, though we can expect CVE-2024-38080 and CVE-2024-38112 to appear there in short order. Microsoft is also patching 5 critical remote code execution (RCE) vulnerabilities today.

Rapid7: The other vulnerability seen exploited in the wild this month is CVE-2024-38112, a Spoofing vulnerability affecting Microsoft’s MSHTML browser engine which can be found on all versions of Windows, including Server editions. User interaction is required for exploitation – for example, a threat actor would need to send the victim a malicious file and convince them to open it. Microsoft is characteristically cagey about what exactly can be spoofed here, though they do indicate that the associated Common Weakness Enumeration (CWE) is CWE-668: Exposure of Resource to Wrong Sphere, which is defined as providing unintended actors with inappropriate access to a resource.

ZDI: CVE-2024-38112 – Windows MSHTML Platform Spoofing Vulnerability. This bug is listed as “Spoofing” for the impact, but it’s not clear exactly what is being spoofed. Microsoft has used this wording in the past for NTLM relay attacks, but that seems unlikely here. Given the researcher who reported this to Microsoft, we’ll likely see additional analysis from them soon. The good news is that a user would need to click a link to be affected. The bad news is that users click anything.

High (22)

2. Elevation of Privilege - Windows Hyper-V (CVE-2024-38080) - High [561]

Description: Windows Hyper-V Elevation of Privilege Vulnerability

Qualys: CVE-2024-38080: Windows Hyper-V Elevation of Privilege Vulnerability Windows Hyper-V allows hardware virtualization. IT professionals and software developers use virtualization to test software on multiple operating systems. Hyper-V enables working professionals to perform these tasks smoothly. With the help of Hyper-V, one can create virtual hard drives, virtual switches, and numerous different virtual devices, all of which can be added to virtual machines. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges.

Tenable: Microsoft’s July 2024 Patch Tuesday Addresses 138 CVEs (CVE-2024-38080, CVE-2024-38112)

Tenable: CVE-2024-38080 | Windows Hyper-V Elevation of Privilege Vulnerability

Tenable: CVE-2024-38080 is an EoP vulnerability in Microsoft Windows Hyper-V virtualization product. It was assigned a CVSSv3 score of 7.8 and is rated as important. A local, authenticated attacker could exploit this vulnerability to elevate to SYSTEM privileges.

Rapid7: Microsoft is addressing 139 vulnerabilities this July 2024 Patch Tuesday, which is on the high side in terms of typical CVE counts. They’ve also republished details for 4 CVEs issued by other vendors that affect Microsoft products. Microsoft has evidence of in-the-wild exploitation for 2 of the vulnerabilities published today. At time of writing, none of the vulnerabilities patched today are listed in CISA’s Known Exploited Vulnerabilities catalog, though we can expect CVE-2024-38080 and CVE-2024-38112 to appear there in short order. Microsoft is also patching 5 critical remote code execution (RCE) vulnerabilities today.

Rapid7: CVE-2024-38080 is an elevation of privilege (EoP) vulnerability affecting Microsoft’s Hyper-V virtualization functionality. Successful exploitation will give an attacker SYSTEM-level privileges. Only more recent editions of Windows are affected; Windows 11 since version 21H2 and Windows Server 2022 (including Server Core).

ZDI: CVE-2024-38080 – Windows Hyper-V Elevation of Privilege Vulnerability. This vulnerability could allow an authenticated threat actor to execute code with SYSTEM privileges. While not specifically stated by Microsoft, let’s assume the worst-case scenario and say that an authorized user could be on a guest OS. Microsoft also does not state how widespread the exploitation is, but this exploit would prove quite useful for ransomware. If you’re running Hyper-V, test and deploy this update quickly.

3. Spoofing - CERT/CC: CVE-2024-3596 RADIUS Protocol (CVE-2024-3596) - High [452]

Description: CERT/CC: CVE-2024-3596 RADIUS Protocol Spoofing Vulnerability

4. Information Disclosure - Microsoft Message Queuing (CVE-2024-38017) - High [450]

Description: Microsoft Message Queuing Information Disclosure Vulnerability

5. Remote Code Execution - Chromium (CVE-2024-5836) - High [442]

Description: Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: High)

MS PT Extended: CVE-2024-5836 was published before July 2024 Patch Tuesday from 2024-06-12 to 2024-07-08

6. Remote Code Execution - Chromium (CVE-2024-6100) - High [442]

Description: Type Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

MS PT Extended: CVE-2024-6100 was published before July 2024 Patch Tuesday from 2024-06-12 to 2024-07-08

7. Remote Code Execution - Microsoft Edge (CVE-2024-34122) - High [430]

Description: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

MS PT Extended: CVE-2024-34122 was published before July 2024 Patch Tuesday from 2024-06-12 to 2024-07-08

8. Remote Code Execution - Windows Remote Desktop Licensing Service (CVE-2024-38074) - High [430]

Description: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Qualys: CVE-2024-38074 & CVE-2024-38076: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability An attacker may send a specially crafted packet to a server set up as a Remote Desktop Licensing server. Successful exploitation of the vulnerability may lead to remote code execution.

Rapid7: Three critical CVEs related to the Windows Remote Desktop Licensing Service were patched this month. CVE-2024-38074, CVE-2024-38076, and CVE-2024-38077. All three of these carry a CVSS 3.1 base score of 9.8 – if you rely on the Remote Desktop licensing service, best get patching immediately. As a mitigation, consider disabling the service entirely until there is an opportunity to apply the update.

9. Remote Code Execution - Windows Remote Desktop Licensing Service (CVE-2024-38076) - High [430]

Description: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Qualys: CVE-2024-38074 & CVE-2024-38076: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability An attacker may send a specially crafted packet to a server set up as a Remote Desktop Licensing server. Successful exploitation of the vulnerability may lead to remote code execution.

Rapid7: Three critical CVEs related to the Windows Remote Desktop Licensing Service were patched this month. CVE-2024-38074, CVE-2024-38076, and CVE-2024-38077. All three of these carry a CVSS 3.1 base score of 9.8 – if you rely on the Remote Desktop licensing service, best get patching immediately. As a mitigation, consider disabling the service entirely until there is an opportunity to apply the update.

10. Remote Code Execution - Windows Remote Desktop Licensing Service (CVE-2024-38077) - High [430]

Description: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Qualys: CVE-2024-38077: Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability Windows Remote Desktop Services (RDS) licensing, also known as Remote Desktop Protocol (RDP) licensing, is a Windows component allowing users to control a remote computer over a network connection. RDS licensing is important when setting up RDS environments, and the Remote Desktop License Server is a critical element of this process. An unauthenticated attacker could connect to the Remote Desktop Licensing Service and send a malicious message that may lead to remote code execution.

Rapid7: Three critical CVEs related to the Windows Remote Desktop Licensing Service were patched this month. CVE-2024-38074, CVE-2024-38076, and CVE-2024-38077. All three of these carry a CVSS 3.1 base score of 9.8 – if you rely on the Remote Desktop licensing service, best get patching immediately. As a mitigation, consider disabling the service entirely until there is an opportunity to apply the update.

ZDI: CVE-2024-38077 – Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability. This is one of three Remote Desktop Licensing RCEs getting fixed this month, and all have a CVSS rating of 9.8. Exploitation of this should be straightforward, as any unauthenticated user could execute their code simply by sending a malicious message to an affected server. As a temporary workaround, you could disable the Licensing Service, but if you’re running it, you likely need it. I would also ensure these servers are not addressable to the Internet. If a bunch of these servers are Internet-connected, I would expect exploitation soon. Now is also a good time to audit your servers to ensure they aren’t running any unnecessary services.

11. Security Feature Bypass - Chromium (CVE-2024-5843) - High [425]

Description: Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file. (Chromium security severity: Medium)

MS PT Extended: CVE-2024-5843 was published before July 2024 Patch Tuesday from 2024-06-12 to 2024-07-08

12. Security Feature Bypass - Chromium (CVE-2024-6101) - High [425]

Description: Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

MS PT Extended: CVE-2024-6101 was published before July 2024 Patch Tuesday from 2024-06-12 to 2024-07-08

13. Elevation of Privilege - Azure CycleCloud (CVE-2024-38092) - High [423]

Description: Azure CycleCloud Elevation of Privilege Vulnerability

14. Remote Code Execution - Microsoft Office (CVE-2024-38021) - High [419]

Description: Microsoft Office Remote Code Execution Vulnerability

Qualys: Other Microsoft Vulnerability Highlights CVE-2024-38024 & CVE-2024-38094 is a remote code execution vulnerability in Microsoft SharePoint Server. An authenticated attacker with Site Owner permissions or higher could upload a specially crafted file to the targeted SharePoint Server and craft specialized API requests to trigger the deserialization of the file’s parameters. This would enable the attacker to execute code remotely in the SharePoint Server context. CVE-2024-38054 & CVE-2024-38052 are elevation of privilege vulnerabilities in the Kernel Streaming WOW Thunk Service Driver. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38059 is an elevation of privilege vulnerability in Win32k. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38085 is an elevation of privilege vulnerability in the Windows Graphics Component. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38100 is an elevation of privilege vulnerability in Windows File Explorer. Upon successful exploitation of the vulnerability, an attacker could gain administrator privileges. CVE-2024-38021 is a remote code execution vulnerability in Microsoft Office. An attacker may craft a malicious link to bypass the Protected View Protocol. An attacker may exploit the vulnerability to leak local NTLM credential information and perform remote code execution. CVE-2024-38066 is an elevation of privilege vulnerability in Windows Win32k. Upon successful exploitation of the vulnerability, an attacker could gain administrator privileges. CVE-2024-38079 is an elevation of privilege vulnerability in the Windows Graphics Component. An attacker must first log on to the system to exploit this vulnerability. An attacker could then run a specially crafted application to exploit the vulnerability and take control of an affected system. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38099 is the denial-of-service vulnerability in Windows Remote Desktop Licensing Service. An attacker must deduce the necessary algorithm to exploit this vulnerability and gain unauthorized access to specific remote procedure call (RPC) endpoints.

Tenable: CVE-2024-38021 | Microsoft Office Remote Code Execution Vulnerability

Tenable: CVE-2024-38021 is a RCE vulnerability affecting Microsoft Office 2016. This vulnerability was assigned a CVSSv3 score of 8.8 and rated as “Exploitation More Likely.” Successful exploitation would allow an attacker to gain elevated privileges, including write, read and delete functionality. MIcrosoft notes that exploitation requires an attacker to create a malicious link that can bypass Protected View Protocol. Based on Microsoft’s description, an attacker would have to entice a user into clicking the link, likely by sending it to an unsuspecting user in a phishing attack. This would result in the attacker gaining access to local NTLM credential information which could be utilized for elevated access to achieve RCE.

15. Remote Code Execution - Windows Fax Service (CVE-2024-38104) - High [419]

Description: Windows Fax Service Remote Code Execution Vulnerability

16. Remote Code Execution - Windows Imaging Component (CVE-2024-38060) - High [419]

Description: Windows Imaging Component Remote Code Execution Vulnerability

Qualys: CVE-2024-38060: Microsoft Windows Codecs Library Remote Code Execution Vulnerability The Microsoft Windows Codecs Library is a collection of codecs that Windows Media Player and other apps use to play and create media files. Codecs can comprise two parts: an encoder that compresses the media file and a decoder that decompresses it. An authenticated attacker may exploit the vulnerability by uploading a malicious TIFF file to a server.

Tenable: CVE-2024-38060 | Windows Imaging Component Remote Code Execution Vulnerability

Tenable: CVE-2024-38060 is a RCE vulnerability affecting the Windows Imaging Component, a framework used for processing images. Microsoft rates this vulnerability as “Exploitation More Likely” and assigned a CVSSv3 score of 8.8 as well as a critical severity rating. Exploitation of this flaw requires an attacker to be authenticated and utilize this access in order to upload a malicious Tag Image File Format (TIFF) file, an image type used for graphics.

Rapid7: All supported versions of Windows (and almost certainly unsupported versions as well) are vulnerable to CVE-2024-38060, a flaw in the Windows Imaging Component related to TIFF (Tagged Image File Format) image processing that could allow an attacker to execute arbitrary code on a system. The example scenario Microsoft provides is simply of an authenticated attacker uploading a specially crafted TIFF image to a server in order to exploit this.

ZDI: CVE-2024-38060 – Microsoft Windows Codecs Library Remote Code Execution Vulnerability. This bug does require the attacker to be authenticated, but any authenticated user could abuse it. It simply requires an authenticated user to upload a specially crafted TIFF image to an affected system. This would be a nifty method for lateral movement once an initial foothold has been achieved. There are no workarounds either, so test and deploy the patch quickly.

17. Remote Code Execution - Windows Layer-2 Bridge Network Driver (CVE-2024-38053) - High [419]

Description: Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

18. Remote Code Execution - Windows MultiPoint Services (CVE-2024-30013) - High [419]

Description: Windows MultiPoint Services Remote Code Execution Vulnerability

19. Elevation of Privilege - Azure Network Watcher VM Extension (CVE-2024-35261) - High [411]

Description: Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

20. Remote Code Execution - Chromium (CVE-2024-5834) - High [407]

Description: Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

MS PT Extended: CVE-2024-5834 was published before July 2024 Patch Tuesday from 2024-06-12 to 2024-07-08

21. Remote Code Execution - Windows Graphics Component (CVE-2024-38051) - High [407]

Description: Windows Graphics Component Remote Code Execution Vulnerability

22. Security Feature Bypass - Chromium (CVE-2024-5840) - High [401]

Description: Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)

MS PT Extended: CVE-2024-5840 was published before July 2024 Patch Tuesday from 2024-06-12 to 2024-07-08

23. Security Feature Bypass - Secure Boot (CVE-2024-28899) - High [401]

Description: Secure Boot Security Feature Bypass Vulnerability

Medium (151)

24. Elevation of Privilege - Windows Win32k (CVE-2024-38059) - Medium [397]

Description: Win32k Elevation of Privilege Vulnerability

Qualys: Other Microsoft Vulnerability Highlights CVE-2024-38024 & CVE-2024-38094 is a remote code execution vulnerability in Microsoft SharePoint Server. An authenticated attacker with Site Owner permissions or higher could upload a specially crafted file to the targeted SharePoint Server and craft specialized API requests to trigger the deserialization of the file’s parameters. This would enable the attacker to execute code remotely in the SharePoint Server context. CVE-2024-38054 & CVE-2024-38052 are elevation of privilege vulnerabilities in the Kernel Streaming WOW Thunk Service Driver. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38059 is an elevation of privilege vulnerability in Win32k. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38085 is an elevation of privilege vulnerability in the Windows Graphics Component. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38100 is an elevation of privilege vulnerability in Windows File Explorer. Upon successful exploitation of the vulnerability, an attacker could gain administrator privileges. CVE-2024-38021 is a remote code execution vulnerability in Microsoft Office. An attacker may craft a malicious link to bypass the Protected View Protocol. An attacker may exploit the vulnerability to leak local NTLM credential information and perform remote code execution. CVE-2024-38066 is an elevation of privilege vulnerability in Windows Win32k. Upon successful exploitation of the vulnerability, an attacker could gain administrator privileges. CVE-2024-38079 is an elevation of privilege vulnerability in the Windows Graphics Component. An attacker must first log on to the system to exploit this vulnerability. An attacker could then run a specially crafted application to exploit the vulnerability and take control of an affected system. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38099 is the denial-of-service vulnerability in Windows Remote Desktop Licensing Service. An attacker must deduce the necessary algorithm to exploit this vulnerability and gain unauthorized access to specific remote procedure call (RPC) endpoints.

Tenable: CVE-2024-38059 and CVE-2024-38066 | Windows Win32k Elevation of Privilege Vulnerability

Tenable: CVE-2024-38059 and CVE-2024-38066 are EoP vulnerabilities affecting Windows Win32k, a core kernel-side driver used in Windows. They were both assigned CVSSv3 scores of 7.8 and are rated as important. An attacker could exploit these vulnerabilities as part of post-compromise activity to elevate privileges to SYSTEM. Microsoft rates these vulnerabilities as “Exploitation More Likely.”

25. Elevation of Privilege - Windows Win32k (CVE-2024-38066) - Medium [397]

Description: Windows Win32k Elevation of Privilege Vulnerability

Qualys: Other Microsoft Vulnerability Highlights CVE-2024-38024 & CVE-2024-38094 is a remote code execution vulnerability in Microsoft SharePoint Server. An authenticated attacker with Site Owner permissions or higher could upload a specially crafted file to the targeted SharePoint Server and craft specialized API requests to trigger the deserialization of the file’s parameters. This would enable the attacker to execute code remotely in the SharePoint Server context. CVE-2024-38054 & CVE-2024-38052 are elevation of privilege vulnerabilities in the Kernel Streaming WOW Thunk Service Driver. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38059 is an elevation of privilege vulnerability in Win32k. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38085 is an elevation of privilege vulnerability in the Windows Graphics Component. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38100 is an elevation of privilege vulnerability in Windows File Explorer. Upon successful exploitation of the vulnerability, an attacker could gain administrator privileges. CVE-2024-38021 is a remote code execution vulnerability in Microsoft Office. An attacker may craft a malicious link to bypass the Protected View Protocol. An attacker may exploit the vulnerability to leak local NTLM credential information and perform remote code execution. CVE-2024-38066 is an elevation of privilege vulnerability in Windows Win32k. Upon successful exploitation of the vulnerability, an attacker could gain administrator privileges. CVE-2024-38079 is an elevation of privilege vulnerability in the Windows Graphics Component. An attacker must first log on to the system to exploit this vulnerability. An attacker could then run a specially crafted application to exploit the vulnerability and take control of an affected system. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38099 is the denial-of-service vulnerability in Windows Remote Desktop Licensing Service. An attacker must deduce the necessary algorithm to exploit this vulnerability and gain unauthorized access to specific remote procedure call (RPC) endpoints.

Tenable: CVE-2024-38059 and CVE-2024-38066 | Windows Win32k Elevation of Privilege Vulnerability

Tenable: CVE-2024-38059 and CVE-2024-38066 are EoP vulnerabilities affecting Windows Win32k, a core kernel-side driver used in Windows. They were both assigned CVSSv3 scores of 7.8 and are rated as important. An attacker could exploit these vulnerabilities as part of post-compromise activity to elevate privileges to SYSTEM. Microsoft rates these vulnerabilities as “Exploitation More Likely.”

26. Remote Code Execution - Microsoft Windows Performance Data Helper Library (CVE-2024-38019) - Medium [395]

Description: Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

27. Remote Code Execution - Microsoft Windows Performance Data Helper Library (CVE-2024-38025) - Medium [395]

Description: Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

28. Remote Code Execution - Microsoft Windows Performance Data Helper Library (CVE-2024-38028) - Medium [395]

Description: Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

29. Remote Code Execution - Windows Distributed Transaction Coordinator (CVE-2024-38049) - Medium [395]

Description: Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability

30. Information Disclosure - Windows TCP/IP (CVE-2024-38064) - Medium [393]

Description: Windows TCP/IP Information Disclosure Vulnerability

31. Elevation of Privilege - Microsoft Defender for IoT (CVE-2024-38089) - Medium [392]

Description: Microsoft Defender for IoT Elevation of Privilege Vulnerability

32. Elevation of Privilege - Windows Text Services Framework (CVE-2024-21417) - Medium [392]

Description: Windows Text Services Framework Elevation of Privilege Vulnerability

33. Remote Code Execution - .NET and Visual Studio (CVE-2024-35264) - Medium [390]

Description: .NET and Visual Studio Remote Code Execution Vulnerability

Qualys: CVE-2024-35264: .NET and Visual Studio Remote Code Execution Vulnerability An attacker must win a race condition to exploit the vulnerability. An attacker may exploit this vulnerability by closing an http/3 stream while the request body is being processed, leading to a race condition. Successful exploitation of the vulnerability may allow an attacker to perform remote code execution on target systems.

Tenable: CVE-2024-35264 |.NET and Visual Studio Remote Code Execution Vulnerability

Tenable: CVE-2024-35264 is a RCE vulnerability affecting.NET and Visual Studio. It was assigned a CVSSv3 score of 8.1 and is the third Microsoft zero-day vulnerability patched this month. While it was not exploited in the wild, details were made public prior to the release of a patch. According to the advisory, exploitation requires an attacker to win a race condition and the exploitability reflects this as it is rated as “Exploitation Less Likely.”

34. Security Feature Bypass - Secure Boot (CVE-2024-37969) - Medium [389]

Description: Secure Boot Security Feature Bypass Vulnerability

35. Security Feature Bypass - Secure Boot (CVE-2024-37970) - Medium [389]

Description: Secure Boot Security Feature Bypass Vulnerability

36. Security Feature Bypass - Secure Boot (CVE-2024-37971) - Medium [389]

Description: Secure Boot Security Feature Bypass Vulnerability

37. Security Feature Bypass - Secure Boot (CVE-2024-37972) - Medium [389]

Description: Secure Boot Security Feature Bypass Vulnerability

38. Security Feature Bypass - Secure Boot (CVE-2024-37973) - Medium [389]

Description: Secure Boot Security Feature Bypass Vulnerability

39. Security Feature Bypass - Secure Boot (CVE-2024-37974) - Medium [389]

Description: Secure Boot Security Feature Bypass Vulnerability

40. Security Feature Bypass - Secure Boot (CVE-2024-37975) - Medium [389]

Description: Secure Boot Security Feature Bypass Vulnerability

41. Security Feature Bypass - Secure Boot (CVE-2024-37977) - Medium [389]

Description: Secure Boot Security Feature Bypass Vulnerability

42. Security Feature Bypass - Secure Boot (CVE-2024-37978) - Medium [389]

Description: Secure Boot Security Feature Bypass Vulnerability

43. Security Feature Bypass - Secure Boot (CVE-2024-37981) - Medium [389]

Description: Secure Boot Security Feature Bypass Vulnerability

44. Security Feature Bypass - Secure Boot (CVE-2024-37984) - Medium [389]

Description: Secure Boot Security Feature Bypass Vulnerability

45. Security Feature Bypass - Secure Boot (CVE-2024-37986) - Medium [389]

Description: Secure Boot Security Feature Bypass Vulnerability

46. Security Feature Bypass - Secure Boot (CVE-2024-37987) - Medium [389]

Description: Secure Boot Security Feature Bypass Vulnerability

47. Security Feature Bypass - Secure Boot (CVE-2024-37988) - Medium [389]

Description: Secure Boot Security Feature Bypass Vulnerability

48. Security Feature Bypass - Secure Boot (CVE-2024-37989) - Medium [389]

Description: Secure Boot Security Feature Bypass Vulnerability

49. Security Feature Bypass - Secure Boot (CVE-2024-38010) - Medium [389]

Description: Secure Boot Security Feature Bypass Vulnerability

50. Security Feature Bypass - Secure Boot (CVE-2024-38011) - Medium [389]

Description: Secure Boot Security Feature Bypass Vulnerability

51. Security Feature Bypass - Windows Cryptographic Services (CVE-2024-30098) - Medium [389]

Description: Windows Cryptographic Services Security Feature Bypass Vulnerability

52. Security Feature Bypass - Windows LockDown Policy (WLDP) (CVE-2024-38070) - Medium [389]

Description: Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability

53. Elevation of Privilege - Microsoft PowerShell (CVE-2024-38043) - Medium [380]

Description: PowerShell Elevation of Privilege Vulnerability

54. Elevation of Privilege - Microsoft PowerShell (CVE-2024-38047) - Medium [380]

Description: PowerShell Elevation of Privilege Vulnerability

55. Elevation of Privilege - Windows File Explorer (CVE-2024-38100) - Medium [380]

Description: Windows File Explorer Elevation of Privilege Vulnerability

Qualys: Other Microsoft Vulnerability Highlights CVE-2024-38024 & CVE-2024-38094 is a remote code execution vulnerability in Microsoft SharePoint Server. An authenticated attacker with Site Owner permissions or higher could upload a specially crafted file to the targeted SharePoint Server and craft specialized API requests to trigger the deserialization of the file’s parameters. This would enable the attacker to execute code remotely in the SharePoint Server context. CVE-2024-38054 & CVE-2024-38052 are elevation of privilege vulnerabilities in the Kernel Streaming WOW Thunk Service Driver. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38059 is an elevation of privilege vulnerability in Win32k. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38085 is an elevation of privilege vulnerability in the Windows Graphics Component. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38100 is an elevation of privilege vulnerability in Windows File Explorer. Upon successful exploitation of the vulnerability, an attacker could gain administrator privileges. CVE-2024-38021 is a remote code execution vulnerability in Microsoft Office. An attacker may craft a malicious link to bypass the Protected View Protocol. An attacker may exploit the vulnerability to leak local NTLM credential information and perform remote code execution. CVE-2024-38066 is an elevation of privilege vulnerability in Windows Win32k. Upon successful exploitation of the vulnerability, an attacker could gain administrator privileges. CVE-2024-38079 is an elevation of privilege vulnerability in the Windows Graphics Component. An attacker must first log on to the system to exploit this vulnerability. An attacker could then run a specially crafted application to exploit the vulnerability and take control of an affected system. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38099 is the denial-of-service vulnerability in Windows Remote Desktop Licensing Service. An attacker must deduce the necessary algorithm to exploit this vulnerability and gain unauthorized access to specific remote procedure call (RPC) endpoints.

56. Elevation of Privilege - Windows Filtering Platform (CVE-2024-38034) - Medium [380]

Description: Windows Filtering Platform Elevation of Privilege Vulnerability

57. Elevation of Privilege - Windows Graphics Component (CVE-2024-38079) - Medium [380]

Description: Windows Graphics Component Elevation of Privilege Vulnerability

Qualys: Other Microsoft Vulnerability Highlights CVE-2024-38024 & CVE-2024-38094 is a remote code execution vulnerability in Microsoft SharePoint Server. An authenticated attacker with Site Owner permissions or higher could upload a specially crafted file to the targeted SharePoint Server and craft specialized API requests to trigger the deserialization of the file’s parameters. This would enable the attacker to execute code remotely in the SharePoint Server context. CVE-2024-38054 & CVE-2024-38052 are elevation of privilege vulnerabilities in the Kernel Streaming WOW Thunk Service Driver. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38059 is an elevation of privilege vulnerability in Win32k. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38085 is an elevation of privilege vulnerability in the Windows Graphics Component. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38100 is an elevation of privilege vulnerability in Windows File Explorer. Upon successful exploitation of the vulnerability, an attacker could gain administrator privileges. CVE-2024-38021 is a remote code execution vulnerability in Microsoft Office. An attacker may craft a malicious link to bypass the Protected View Protocol. An attacker may exploit the vulnerability to leak local NTLM credential information and perform remote code execution. CVE-2024-38066 is an elevation of privilege vulnerability in Windows Win32k. Upon successful exploitation of the vulnerability, an attacker could gain administrator privileges. CVE-2024-38079 is an elevation of privilege vulnerability in the Windows Graphics Component. An attacker must first log on to the system to exploit this vulnerability. An attacker could then run a specially crafted application to exploit the vulnerability and take control of an affected system. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38099 is the denial-of-service vulnerability in Windows Remote Desktop Licensing Service. An attacker must deduce the necessary algorithm to exploit this vulnerability and gain unauthorized access to specific remote procedure call (RPC) endpoints.

58. Elevation of Privilege - Windows Graphics Component (CVE-2024-38085) - Medium [380]

Description: Windows Graphics Component Elevation of Privilege Vulnerability

Qualys: Other Microsoft Vulnerability Highlights CVE-2024-38024 & CVE-2024-38094 is a remote code execution vulnerability in Microsoft SharePoint Server. An authenticated attacker with Site Owner permissions or higher could upload a specially crafted file to the targeted SharePoint Server and craft specialized API requests to trigger the deserialization of the file’s parameters. This would enable the attacker to execute code remotely in the SharePoint Server context. CVE-2024-38054 & CVE-2024-38052 are elevation of privilege vulnerabilities in the Kernel Streaming WOW Thunk Service Driver. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38059 is an elevation of privilege vulnerability in Win32k. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38085 is an elevation of privilege vulnerability in the Windows Graphics Component. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38100 is an elevation of privilege vulnerability in Windows File Explorer. Upon successful exploitation of the vulnerability, an attacker could gain administrator privileges. CVE-2024-38021 is a remote code execution vulnerability in Microsoft Office. An attacker may craft a malicious link to bypass the Protected View Protocol. An attacker may exploit the vulnerability to leak local NTLM credential information and perform remote code execution. CVE-2024-38066 is an elevation of privilege vulnerability in Windows Win32k. Upon successful exploitation of the vulnerability, an attacker could gain administrator privileges. CVE-2024-38079 is an elevation of privilege vulnerability in the Windows Graphics Component. An attacker must first log on to the system to exploit this vulnerability. An attacker could then run a specially crafted application to exploit the vulnerability and take control of an affected system. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38099 is the denial-of-service vulnerability in Windows Remote Desktop Licensing Service. An attacker must deduce the necessary algorithm to exploit this vulnerability and gain unauthorized access to specific remote procedure call (RPC) endpoints.

59. Elevation of Privilege - Windows Kernel-Mode Driver (CVE-2024-38062) - Medium [380]

Description: Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

60. Elevation of Privilege - Windows Remote Access Connection Manager (CVE-2024-30079) - Medium [380]

Description: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

61. Elevation of Privilege - Windows Workstation Service (CVE-2024-38050) - Medium [380]

Description: Windows Workstation Service Elevation of Privilege Vulnerability

62. Remote Code Execution - Microsoft SharePoint (CVE-2024-38094) - Medium [378]

Description: Microsoft SharePoint Remote Code Execution Vulnerability

Qualys: Other Microsoft Vulnerability Highlights CVE-2024-38024 & CVE-2024-38094 is a remote code execution vulnerability in Microsoft SharePoint Server. An authenticated attacker with Site Owner permissions or higher could upload a specially crafted file to the targeted SharePoint Server and craft specialized API requests to trigger the deserialization of the file’s parameters. This would enable the attacker to execute code remotely in the SharePoint Server context. CVE-2024-38054 & CVE-2024-38052 are elevation of privilege vulnerabilities in the Kernel Streaming WOW Thunk Service Driver. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38059 is an elevation of privilege vulnerability in Win32k. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38085 is an elevation of privilege vulnerability in the Windows Graphics Component. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38100 is an elevation of privilege vulnerability in Windows File Explorer. Upon successful exploitation of the vulnerability, an attacker could gain administrator privileges. CVE-2024-38021 is a remote code execution vulnerability in Microsoft Office. An attacker may craft a malicious link to bypass the Protected View Protocol. An attacker may exploit the vulnerability to leak local NTLM credential information and perform remote code execution. CVE-2024-38066 is an elevation of privilege vulnerability in Windows Win32k. Upon successful exploitation of the vulnerability, an attacker could gain administrator privileges. CVE-2024-38079 is an elevation of privilege vulnerability in the Windows Graphics Component. An attacker must first log on to the system to exploit this vulnerability. An attacker could then run a specially crafted application to exploit the vulnerability and take control of an affected system. Successful exploitation of the vulnerability may allow an attacker to gain SYSTEM privileges. CVE-2024-38099 is the denial-of-service vulnerability in Windows Remote Desktop Licensing Service. An attacker must deduce the necessary algorithm to exploit this vulnerability and gain unauthorized access to specific remote procedure call (RPC) endpoints.

63. Security Feature Bypass - BitLocker (CVE-2024-38058) - Medium [377]

Description: BitLocker Security Feature Bypass Vulnerability

64. Security Feature Bypass - Secure Boot (CVE-2024-26184) - Medium [377]

Description: Secure Boot Security Feature Bypass Vulnerability

65. Security Feature Bypass - Secure Boot (CVE-2024-38065) - Medium [377]

Description: Secure Boot Security Feature Bypass Vulnerability

66. Security Feature Bypass - Windows Enroll Engine (CVE-2024-38069) - Medium [377]

Description: Windows Enroll Engine Security Feature Bypass Vulnerability

67. Information Disclosure - Windows Kernel (CVE-2024-38041) - Medium [369]

Description: Windows Kernel Information Disclosure Vulnerability

68. Remote Code Execution - Microsoft OLE DB Driver for SQL Server (CVE-2024-37334) - Medium [369]

Description: Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

Tenable: |CVE-2024-37334||Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability||8.8|

69. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-20701) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-20701||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

70. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-21303) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-21303||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

71. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-21308) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-21308||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

72. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-21317) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-21317||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

73. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-21331) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-21331||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

74. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-21332) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-21332||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

75. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-21333) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-21333||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

76. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-21335) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-21335||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

77. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-21373) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-21373||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

78. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-21398) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-21398||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

79. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-21414) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-21414||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

80. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-21415) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-21415||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

81. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-21425) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-21425||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

82. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-21428) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-21428||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

83. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-21449) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-21449||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

84. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-28928) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-28928||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

85. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-35256) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-35256||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

86. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-35271) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-35271||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

87. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-35272) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-35272||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

88. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-37318) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-37318||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

89. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-37319) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-37319||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

90. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-37320) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-37320||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

91. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-37321) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-37321||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

92. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-37322) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-37322||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

93. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-37323) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-37323||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

94. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-37324) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-37324||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

95. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-37326) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-37326||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

96. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-37327) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-37327||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

97. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-37328) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-37328||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

98. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-37329) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-37329||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

99. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-37330) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-37330||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

100. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-37331) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-37331||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

101. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-37332) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

Tenable: |CVE-2024-37332||SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability||8.8|

102. Remote Code Execution - SQL Server Native Client OLE DB Provider (CVE-2024-37333) - Medium [369]

Description: SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability