CVE tracker

Microsoft Patch Tuesday

What Microsoft fixes on the second Tuesday of every month – straight from the official Security Update Guide: number of vulnerabilities, critical and already exploited ones (zero-days), affected products and the history of the last 24 months.

130vulnerabilities fixed (CVEs)

6of them critical

2exploited (zero-day)

4publicly disclosed

Tue, 10 Nov 2026Next Patch Tuesday
in 8 days and 13 hours

← Back to the month overview

All CVEs – Patch Tuesday October 2024

130 vulnerabilities

CVE-2024-43572ImportantCVSS 7.8Exploited (zero-day)Publicly disclosedRemote code execution

Microsoft Management Console Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044280 KB5044273 · MSRC

CVE-2024-43573ModerateCVSS 6.5Exploited (zero-day)Publicly disclosedSpoofing

Windows MSHTML Platform Spoofing Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044273 KB5044280 KB5044285 KB5044281 · MSRC

CVE-2024-43468CriticalCVSS 9.8Remote code execution

Microsoft Configuration Manager Remote Code Execution Vulnerability

System Center and Defender · MSRC

CVE-2024-43488CriticalCVSS 8.8Remote code execution

Visual Studio Code extension for Arduino Remote Code Execution Vulnerability

Developer tools (.NET, Visual Studio …) · MSRC

CVE-2024-38139CriticalCVSS 8.7Elevation of privilege

Microsoft Dataverse Elevation of Privilege Vulnerability

Microsoft Dynamics · MSRC

CVE-2024-43582CriticalCVSS 8.1Remote code execution

Remote Desktop Protocol Server Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044280 KB5044273 · MSRC

CVE-2024-38204CriticalCVSS 7.5Information disclosure

Imagine Cup site Information Disclosure Vulnerability

Azure · MSRC

CVE-2024-38190CriticalInformation disclosure

Power Platform Information Disclosure Vulnerability

Microsoft Dynamics · MSRC

CVE-2024-38124ImportantCVSS 9.0Elevation of privilege

Windows Netlogon Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044288 KB5044293 · MSRC

CVE-2024-38179ImportantCVSS 8.8Elevation of privilege

Azure Stack Hyperconverged Infrastructure (HCI) Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2024-38212ImportantCVSS 8.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044288 KB5044293 · MSRC

CVE-2024-38265ImportantCVSS 8.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044288 KB5044293 · MSRC

CVE-2024-43453ImportantCVSS 8.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044288 KB5044293 · MSRC

CVE-2024-43517ImportantCVSS 8.8Remote code execution

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044280 KB5044273 · MSRC

CVE-2024-43518ImportantCVSS 8.8Remote code execution

Windows Telephony Server Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044280 KB5044273 · MSRC

CVE-2024-43519ImportantCVSS 8.8Remote code execution

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044280 KB5044273 · MSRC

CVE-2024-43532ImportantCVSS 8.8Elevation of privilege

Remote Registry Service Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044280 KB5044273 · MSRC

CVE-2024-43533ImportantCVSS 8.8Remote code execution

Remote Desktop Client Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044281 KB5044280 KB5044285 KB5044288 · MSRC

CVE-2024-43549ImportantCVSS 8.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044288 KB5044293 · MSRC

CVE-2024-43564ImportantCVSS 8.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044288 KB5044293 · MSRC

CVE-2024-43589ImportantCVSS 8.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044288 KB5044293 · MSRC

CVE-2024-43592ImportantCVSS 8.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044288 KB5044293 · MSRC

CVE-2024-43593ImportantCVSS 8.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044288 KB5044293 · MSRC

CVE-2024-43599ImportantCVSS 8.8Remote code execution

Remote Desktop Client Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044280 KB5044273 · MSRC

CVE-2024-43607ImportantCVSS 8.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044288 KB5044293 · MSRC

CVE-2024-43608ImportantCVSS 8.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044288 KB5044293 · MSRC

CVE-2024-43611ImportantCVSS 8.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044288 KB5044293 · MSRC

CVE-2024-43591ImportantCVSS 8.7Elevation of privilege

Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

Azure · MSRC

CVE-2024-43497ImportantCVSS 8.4Remote code execution

DeepSpeed Remote Code Execution Vulnerability

Developer tools (.NET, Visual Studio …) · MSRC

CVE-2024-43574ImportantCVSS 8.3Remote code execution

Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044281 KB5044280 KB5044273 KB5044285 · MSRC

CVE-2024-38229ImportantCVSS 8.1Remote code execution

.NET and Visual Studio Remote Code Execution Vulnerability

Developer tools (.NET, Visual Studio …) · KB5045993 · MSRC

CVE-2024-30092ImportantCVSS 8.0Remote code execution

Windows Hyper-V Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044280 KB5044273 · MSRC

CVE-2024-38261ImportantCVSS 7.8Remote code execution

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044288 KB5044293 · MSRC

CVE-2024-43501ImportantCVSS 7.8Elevation of privilege

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044280 KB5044273 · MSRC

CVE-2024-43503ImportantCVSS 7.8Elevation of privilege

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft Office · KB5002645 KB5002647 KB5002649 · MSRC

CVE-2024-43504ImportantCVSS 7.8Remote code execution

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office · KB5002643 · MSRC

CVE-2024-43505ImportantCVSS 7.8Remote code execution

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Office · MSRC

CVE-2024-43509ImportantCVSS 7.8Elevation of privilege

Windows Graphics Component Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044280 KB5044273 · MSRC

CVE-2024-43514ImportantCVSS 7.8Elevation of privilege

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044284 KB5044277 KB5044281 KB5044280 · MSRC

CVE-2024-43516ImportantCVSS 7.8Elevation of privilege

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5046615 KB5046616 KB5046698 KB5044280 · MSRC

CVE-2024-43527ImportantCVSS 7.8Elevation of privilege

Windows Kernel Elevation of Privilege Vulnerability

Windows · KB5044284 · MSRC

CVE-2024-43528ImportantCVSS 7.8Elevation of privilege

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5046615 KB5046616 KB5046698 KB5044280 · MSRC

CVE-2024-43551ImportantCVSS 7.8Elevation of privilege

Windows Storage Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044280 KB5044273 · MSRC

CVE-2024-43556ImportantCVSS 7.8Elevation of privilege

Windows Graphics Component Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044280 KB5044273 · MSRC

CVE-2024-43560ImportantCVSS 7.8Elevation of privilege

Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044280 KB5044273 · MSRC

CVE-2024-43563ImportantCVSS 7.8Elevation of privilege

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5044277 KB5044281 KB5044280 KB5044273 · MSRC

CVE-2024-43576ImportantCVSS 7.8Remote code execution

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office · MSRC

CVE-2024-43583ImportantCVSS 7.8Publicly disclosedElevation of privilege

Winlogon Elevation of Privilege Vulnerability

Windows, Windows ESU (Extended Security Updates) · KB5048661 KB5048654 KB5048800 KB5044280 · MSRC

CVE-2024-43590ImportantCVSS 7.8Elevation of privilege

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

Developer tools (.NET, Visual Studio …) · MSRC

CVE-2024-43601ImportantCVSS 7.8Remote code execution

Visual Studio Code for Linux Remote Code Execution Vulnerability

Developer tools (.NET, Visual Studio …) · MSRC

Sources

The tracker combines official, freely usable data sources – updated continuously:

NVD (NIST) – CVEs, rating (CVSS), affected products
CISA KEV – vulnerabilities confirmed by CISA as actively exploited
CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
FIRST EPSS – probability of exploitation
Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
PoC-in-GitHub – public proof-of-concept repositories
Metasploit (Rapid7) – modules of the Metasploit Framework
Exploit-DB (OffSec) – archive of public exploits (links only)
Patch days: official vendor pages (linked per vendor) (Vendor patch days)

Affected? We can help.

We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.

Get in touch RSS feed