The six actively zero-day vulnerabilities:

  • CVE-2024-38178 - Scripting Engine Memory Corruption Vulnerability
  • CVE-2024-38193 - Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
  • CVE-2024-38213 - Windows Mark of the Web Security Feature Bypass Vulnerability
  • CVE-2024-38106 - Windows Kernel Elevation of Privilege Vulnerability
  • CVE-2024-38107 - Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
  • CVE-2024-38189 - Microsoft Project Remote Code Execution Vulnerability

The four publicly disclosed vulnerabilities:

  • CVE-2024-38199 - Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
  • CVE-2024-21302 - Windows Secure Kernel Mode Elevation of Privilege Vulnerability
  • CVE-2024-38200 - Microsoft Office Spoofing Vulnerability
  • CVE-2024-38202 - Windows Update Stack Elevation of Privilege Vulnerability

The 89 vulnerabilities:

  • 36 Elevation of Privilege Vulnerabilities
  • 4 Security Feature Bypass Vulnerabilities
  • 28 Remote Code Execution Vulnerabilities
  • 8 Information Disclosure Vulnerabilities
  • 6 Denial of Service Vulnerabilities
  • 7 Spoofing Vulnerabilities

Application:
• Windows Server 2022
• Windows Server 2019 (Server Core installation)
• Windows Server 2019
• Windows 10 Version 1809 for ARM64-based Systems
• Windows 10 Version 1809 for x64-based Systems
• C SDK for Azure IoT
• Azure IoT Hub Device Client SDK
• Windows 11 Version 24H2 for x64-based Systems
• Windows 11 Version 24H2 for ARM64-based Systems
• Windows 11 Version 23H2 for x64-based Systems
• Windows 11 Version 23H2 for ARM64-based Systems
• Windows 10 Version 22H2 for 32-bit Systems
• Windows 10 Version 21H2 for x64-based Systems
• Windows 10 Version 21H2 for ARM64-based Systems
• Windows 10 Version 21H2 for 32-bit Systems
• Windows 11 version 21H2 for ARM64-based Systems
• Windows 11 version 21H2 for x64-based Systems
• Windows Server 2022 (Server Core installation)
• Windows Server 2016
• Windows 10 Version 1607 for x64-based Systems
• Windows 10 Version 1607 for 32-bit Systems
• Windows 10 for x64-based Systems
• Windows 10 for 32-bit Systems
• Windows Server 2022, 23H2 Edition (Server Core installation)
• Windows Server 2012 (Server Core installation)
• Windows Server 2012
• Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core
installation)
• Windows Server 2008 R2 for x64-based Systems Service Pack 1
• Windows Server 2016 (Server Core installation)
• Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core
installation)
• Windows Server 2008 for 32-bit Systems Service Pack 2
• Windows 10 Version 22H2 for ARM64-based Systems
• Windows 10 Version 22H2 for x64-based Systems
• Windows 11 Version 22H2 for x64-based Systems
• Windows 11 Version 22H2 for ARM64-based Systems
• Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core
installation)
• Windows Server 2008 for x64-based Systems Service Pack 2
• Windows Server 2012 R2 (Server Core installation)
• Windows Server 2012 R2
• Azure Health Bot
• Windows 10 Version 1809 for 32-bit Systems
• Microsoft Dynamics 365 (on-premises) version 9.1
• CBL Mariner 2.0 x64
• CBL Mariner 2.0 ARM
• CBL Mariner 1.0 x64
• CBL Mariner 1.0 ARM
• Azure Linux 3.0 x64
• Azure Linux 3.0 ARM
• Azure CycleCloud 8.6.1
• Azure CycleCloud 8.6.2
• Azure CycleCloud 8.5.0
• Azure CycleCloud 8.4.2
• Azure CycleCloud 8.4.1
• Azure CycleCloud 8.4.0
• Azure CycleCloud 8.3.0
• Azure CycleCloud 8.2.1
• Azure CycleCloud 8.2.2
• Azure CycleCloud 8.1.1
• Azure CycleCloud 8.1.0
• Azure CycleCloud 8.0.2
• Azure CycleCloud 8.0.1
• Azure CycleCloud 8.6.0
• Azure CycleCloud 8.0.0
• Azure CycleCloud 8.2.0
• Microsoft Office LTSC 2021 for 64-bit editions
• Microsoft Office LTSC 2021 for 32-bit editions
• Microsoft Project 2016 (64-bit edition)
• Microsoft Project 2016 (32-bit edition)
• Microsoft 365 Apps for Enterprise for 64-bit Systems
• Microsoft 365 Apps for Enterprise for 32-bit Systems
• Microsoft Office 2019 for 64-bit editions
• Microsoft Office 2019 for 32-bit editions
• App Installer
• Microsoft Outlook 2016 (64-bit edition)
• Microsoft Outlook 2016 (32-bit edition)
• Microsoft PowerPoint 2016 (64-bit edition)
• Microsoft PowerPoint 2016 (32-bit edition)
• Microsoft Office LTSC for Mac 2021
• Azure Connected Machine Agent
• Remote Desktop client for Windows Desktop
• Microsoft OfficePLUS
• Azure Stack Hub
• Microsoft Teams for iOS
• Microsoft Visual Studio 2022 version 17.8
• Microsoft Visual Studio 2022 version 17.10
• Microsoft Visual Studio 2022 version 17.6
• .NET 8.0
• Microsoft Edge (Chromium-based)
• Microsoft Office 2016 (64-bit edition)
• Microsoft Office 2016 (32-bit edition)
• Microsoft Copilot Studio
• Dynamics CRM Service Portal Web Resource
• Dynamics 365 Field Service (on-premises) v7 series
• GroupMe
• Azure Arc Resource Bridge
• Azure Kubernetes Service Node on Ubuntu Linux
• Azure Kubernetes Service Node on Azure Linux
• PowerShell 7.2
• PowerShell 7.4
• .NET 6.0
• Microsoft Visual Studio 2022 version 17.4
• Azure CycleCloud 7.9.5
• Azure CycleCloud 7.9.4
• Azure CycleCloud 7.9.6
• Azure CycleCloud 7.9.2
• Azure CycleCloud 7.9.11
• Azure CycleCloud 7.9.8
• Azure CycleCloud 7.9.10
• Microsoft Defender for IoT
• Microsoft .NET Framework 3.5 AND 4.7.2
• Microsoft .NET Framework 3.5 AND 4.8
• Microsoft .NET Framework 4.8
• Microsoft .NET Framework 3.5.1
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
• Microsoft .NET Framework 3.0 Service Pack 2
• Microsoft .NET Framework 2.0 Service Pack 2
• Microsoft .NET Framework 4.6/4.6.2
• Microsoft .NET Framework 4.6.2
• Microsoft .NET Framework 3.5 AND 4.8.1
• Microsoft SharePoint Server Subscription Edition
• Microsoft SharePoint Server 2019
• Microsoft SharePoint Enterprise Server 2016
• Azure CycleCloud 7.9.7
• Azure CycleCloud 7.9.9
• Azure CycleCloud 7.9.1
• Azure CycleCloud 7.9.3
• Azure CycleCloud 7.9.0
• Microsoft SQL Server 2019 for x64-based Systems (CU 27)
• Microsoft SQL Server 2022 for x64-based Systems (CU 13)
• Microsoft SQL Server 2022 for x64-based Systems (GDR)
• Microsoft SQL Server 2017 for x64-based Systems (CU 31)
• Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure
Connect Feature Pack
• Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)
• Microsoft SQL Server 2019 for x64-based Systems (GDR)
• Microsoft SQL Server 2017 for x64-based Systems (GDR)
• Microsoft OLE DB Driver 18 for SQL Server
• Microsoft OLE DB Driver 19 for SQL Server
• Azure DevOps Server 2022.1
• Azure Network Watcher VM Extension for Windows
• Azure Kinect SD
• Microsoft Window