Microsoft Server security updates, October 2024 (Patch Tuesday 2024-10-08)

Every Microsoft server-product CVE that the Microsoft Security Update Guide published in October 2024, including the Patch Tuesday release on 2024-10-08 and any out-of-band updates. Client-only products (Edge, Office apps, consumer Windows) are not tracked.

Advisories: 60
Critical: 1
High: 42
In CISA KEV: 2
CVEs: 60

Microsoft server CVEs, October 2024

Oct 8, 2024
Critical [CVE-2024-38124] Windows Netlogon Elevation of Privilege Vulnerability
Critical9.0
Oct 8, 2024
High [CVE-2024-43611] Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
High8.8
Oct 8, 2024
High [CVE-2024-43583] Winlogon Elevation of Privilege Vulnerability
High7.8
Oct 8, 2024
High [CVE-2024-43599] Remote Desktop Client Remote Code Execution Vulnerability
High8.8
Oct 8, 2024
High [CVE-2024-43584] Windows Scripting Engine Security Feature Bypass Vulnerability
High7.7
Oct 8, 2024
High [CVE-2024-43582] Remote Desktop Protocol Server Remote Code Execution Vulnerability
High8.1
Oct 8, 2024
High [CVE-2024-43575] Windows Hyper-V Denial of Service Vulnerability
High7.5
Oct 8, 2024
High [CVE-2024-43574] Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
High8.3
Oct 8, 2024
High [CVE-2024-43572] Microsoft Management Console Remote Code Execution Vulnerability
High7.8ExploitedCISA KEV
Oct 8, 2024
High [CVE-2024-43567] Windows Hyper-V Denial of Service Vulnerability
High7.5
Oct 8, 2024
High [CVE-2024-43565] Windows Network Address Translation (NAT) Denial of Service Vulnerability
High7.5
Oct 8, 2024
High [CVE-2024-43563] Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
High7.8
Oct 8, 2024
High [CVE-2024-43560] Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
High7.8
Oct 8, 2024
High [CVE-2024-43556] Windows Graphics Component Elevation of Privilege Vulnerability
High7.8
Oct 8, 2024
High [CVE-2024-43553] NT OS Kernel Elevation of Privilege Vulnerability
High7.4
Oct 8, 2024
High [CVE-2024-43552] Windows Shell Remote Code Execution Vulnerability
High7.3
Oct 8, 2024
High [CVE-2024-43551] Windows Storage Elevation of Privilege Vulnerability
High7.8
Oct 8, 2024
High [CVE-2024-43550] Windows Secure Channel Spoofing Vulnerability
High7.4
Oct 8, 2024
High [CVE-2024-43545] Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
High7.5
Oct 8, 2024
High [CVE-2024-43544] Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
High7.5
Oct 8, 2024
High [CVE-2024-43528] Windows Secure Kernel Mode Elevation of Privilege Vulnerability
High7.8
Oct 8, 2024
High [CVE-2024-43517] Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
High8.8
Oct 8, 2024
High [CVE-2024-43514] Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
High7.8
Oct 8, 2024
High [CVE-2024-43511] Windows Kernel Elevation of Privilege Vulnerability
High7.0
Oct 8, 2024
High [CVE-2024-43501] Windows Common Log File System Driver Elevation of Privilege Vulnerability
High7.8
Oct 8, 2024
High [CVE-2024-30092] Windows Hyper-V Remote Code Execution Vulnerability
High8.0
Oct 8, 2024
High [CVE-2024-38262] Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
High7.5
Oct 8, 2024
High [CVE-2024-38129] Windows Kerberos Elevation of Privilege Vulnerability
High7.5
Oct 8, 2024
High [CVE-2024-38029] Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
High7.5
Oct 8, 2024
High [CVE-2024-38149] BranchCache Denial of Service Vulnerability
High7.5
Oct 8, 2024
High [CVE-2024-20659] Windows Hyper-V Security Feature Bypass Vulnerability
High7.1
Oct 8, 2024
High [CVE-2024-43615] Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
High7.1
Oct 8, 2024
High [CVE-2024-43535] Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
High7.0
Oct 8, 2024
High [CVE-2024-43533] Remote Desktop Client Remote Code Execution Vulnerability
High8.8
Oct 8, 2024
High [CVE-2024-43532] Remote Registry Service Elevation of Privilege Vulnerability
High8.8
Oct 8, 2024
High [CVE-2024-43529] Windows Print Spooler Elevation of Privilege Vulnerability
High7.3
Oct 8, 2024
High [CVE-2024-43519] Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
High8.8
Oct 8, 2024
High [CVE-2024-43518] Windows Telephony Server Remote Code Execution Vulnerability
High8.8
Oct 8, 2024
High [CVE-2024-43515] Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability
High7.5
Oct 8, 2024
High [CVE-2024-43503] Microsoft SharePoint Elevation of Privilege Vulnerability
High7.8
Oct 8, 2024
High [CVE-2024-43502] Windows Kernel Elevation of Privilege Vulnerability
High7.1
Oct 8, 2024
High [CVE-2024-38179] Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability
High8.8
Oct 8, 2024
High [CVE-2024-43516] Windows Secure Kernel Mode Elevation of Privilege Vulnerability
High7.8
Oct 8, 2024
Medium [CVE-2024-43585] Code Integrity Guard Security Feature Bypass Vulnerability
Medium5.5
Oct 8, 2024
Medium [CVE-2024-43570] Windows Kernel Elevation of Privilege Vulnerability
Medium6.4
Oct 8, 2024
Medium [CVE-2024-43561] Windows Mobile Broadband Driver Denial of Service Vulnerability
Medium6.5
Oct 8, 2024
Medium [CVE-2024-43547] Windows Kerberos Information Disclosure Vulnerability
Medium6.5
Oct 8, 2024
Medium [CVE-2024-43546] Windows Cryptographic Information Disclosure Vulnerability
Medium5.6
Oct 8, 2024
Medium [CVE-2024-43536] Windows Mobile Broadband Driver Remote Code Execution Vulnerability
Medium6.8
Oct 8, 2024
Medium [CVE-2024-43520] Windows Kernel Denial of Service Vulnerability
Medium5.0
Oct 8, 2024
Medium [CVE-2024-43512] Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Medium6.5
Oct 8, 2024
Medium [CVE-2024-43456] Windows Remote Desktop Services Tampering Vulnerability
Medium4.8
Oct 8, 2024
Medium [CVE-2024-37983] Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
Medium6.7
Oct 8, 2024
Medium [CVE-2024-37979] Windows Kernel Elevation of Privilege Vulnerability
Medium6.7
Oct 8, 2024
Medium [CVE-2024-43500] Windows Resilient File System (ReFS) Information Disclosure Vulnerability
Medium5.5
Oct 8, 2024
Medium [CVE-2024-43573] Windows MSHTML Platform Spoofing Vulnerability
Medium6.5ExploitedCISA KEV
Oct 8, 2024
Medium [CVE-2024-43554] Windows Kernel-Mode Driver Information Disclosure Vulnerability
Medium5.5
Oct 8, 2024
Medium [CVE-2024-43534] Windows Graphics Component Information Disclosure Vulnerability
Medium6.5
Oct 8, 2024
Medium [CVE-2024-43513] BitLocker Security Feature Bypass Vulnerability
Medium6.4
Oct 8, 2024
Medium [CVE-2024-43508] Windows Graphics Component Information Disclosure Vulnerability
Medium5.5

Get an email when Microsoft publishes the next one.

See Microsoft's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Microsoft

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.