Patch Tuesday, July 2024
Microsoft's monthly security release, Tuesday, July 9, 2024. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
3 CVEs · 0 critical · 3 exploited · 2 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
3 CVEs · 0 critical · 3 exploited · 2 with public exploit code
- 7.8HighJul 9, 2024Microsoft Windows Memory corruptionCVE-2024-38080Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.Exploited7.1% likelyExploit code
- 7.5HighJul 9, 2024Microsoft WindowsCVE-2024-38112Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability.Exploited84% likelyExploit code
- 7.2HighJul 9, 2024Microsoft SharePoint DeserializationCVE-2024-38094Microsoft SharePoint Unauthorized access to sensitive data Patch SharePoint to the latest version.Exploited51% likelyDetection
Adobe
No tracked Adobe CVEs in this window.
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.