Microsoft Server security updates, February 2024 (Patch Tuesday 2024-02-13)

Every Microsoft server-product CVE that the Microsoft Security Update Guide published in February 2024, including the Patch Tuesday release on 2024-02-13 and any out-of-band updates. Client-only products (Edge, Office apps, consumer Windows) are not tracked.

Advisories: 27
Critical: 1
High: 17
In CISA KEV: 4
CVEs: 27

Microsoft server CVEs, February 2024

Feb 13, 2024
Critical [CVE-2024-21410] Microsoft Exchange Server Elevation of Privilege Vulnerability
Critical9.8ExploitedCISA KEV
Feb 13, 2024
High [CVE-2024-21412] Internet Shortcut Files Security Feature Bypass Vulnerability
High8.1ExploitedCISA KEV
Feb 13, 2024
High [CVE-2024-21406] Windows Printing Service Spoofing Vulnerability
High7.5
Feb 13, 2024
High [CVE-2024-21405] Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
High7.0
Feb 13, 2024
High [CVE-2024-21391] Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
High8.8
Feb 13, 2024
High [CVE-2024-21363] Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
High7.8
Feb 13, 2024
High [CVE-2024-21353] Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
High8.8
Feb 13, 2024
High [CVE-2024-21348] Internet Connection Sharing (ICS) Denial of Service Vulnerability
High7.5
Feb 13, 2024
High [CVE-2024-21347] Microsoft ODBC Driver Remote Code Execution Vulnerability
High7.5
Feb 13, 2024
High [CVE-2024-21346] Win32k Elevation of Privilege Vulnerability
High7.8
Feb 13, 2024
High [CVE-2024-21345] Windows Kernel Elevation of Privilege Vulnerability
High8.8
Feb 13, 2024
High [CVE-2024-21342] Windows DNS Client Denial of Service Vulnerability
High7.5
Feb 13, 2024
High [CVE-2024-21372] Windows OLE Remote Code Execution Vulnerability
High8.8
Feb 13, 2024
High [CVE-2024-21371] Windows Kernel Elevation of Privilege Vulnerability
High7.0
Feb 13, 2024
High [CVE-2024-21357] Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
High8.1
Feb 13, 2024
High [CVE-2024-21351] Windows SmartScreen Security Feature Bypass Vulnerability
High7.6ExploitedCISA KEV
Feb 13, 2024
High [CVE-2024-21349] Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
High8.8
Feb 13, 2024
High [CVE-2024-21338] Windows Kernel Elevation of Privilege Vulnerability
High7.8ExploitedCISA KEV
Feb 13, 2024
Medium [CVE-2024-21377] Windows DNS Information Disclosure Vulnerability
Medium5.5
Feb 13, 2024
Medium [CVE-2024-21362] Windows Kernel Security Feature Bypass Vulnerability
Medium5.5
Feb 13, 2024
Medium [CVE-2024-21356] Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
Medium6.5
Feb 13, 2024
Medium [CVE-2024-21344] Windows Network Address Translation (NAT) Denial of Service Vulnerability
Medium5.9
Feb 13, 2024
Medium [CVE-2024-21341] Windows Kernel Remote Code Execution Vulnerability
Medium6.8
Feb 13, 2024
Medium [CVE-2024-21339] Windows USB Generic Parent Driver Remote Code Execution Vulnerability
Medium6.4
Feb 13, 2024
Medium [CVE-2024-20684] Windows Hyper-V Denial of Service Vulnerability
Medium6.5
Feb 13, 2024
Medium [CVE-2024-21304] Trusted Compute Base Elevation of Privilege Vulnerability
Medium4.1
Feb 13, 2024
Medium [CVE-2024-21340] Windows Kernel Information Disclosure Vulnerability
Medium4.6

Get an email when Microsoft publishes the next one.

See Microsoft's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Microsoft

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.