Patch Tuesday, June 2024

Microsoft's monthly security release, Tuesday, June 11, 2024. Includes CVEs published within two days either side; Adobe and SAP ride the same day.

2 CVEs · 0 critical · 2 exploited · 2 with public exploit code

Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.

← May 2024 July 2024 →Open in the dashboard

Microsoft

2 CVEs · 0 critical · 2 exploited · 2 with public exploit code

7.8HighJun 11, 2024Microsoft Windows Memory corruptionCVE-2024-35250Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference vulnerability that allows a local attacker to escalate privileges.Exploited25% likelyExploit codeMetasploitDetection
7.0HighJun 11, 2024Microsoft WindowsCVE-2024-30088Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation. Exploited68% likelyExploit code

Adobe

1 CVE · 1 critical · 1 exploited · 1 with public exploit code

9.8CriticalJun 13, 2024Adobe Commerce and Magento Open SourceCVE-2024-34102Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.Exploited100% likelyExploit codeMetasploit · NucleiDetection

SAP

No tracked SAP CVEs in this window.

The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.