Microsoft February 2024 Patch Tuesday fixes 2 zero-days, 73 flaws

TagCVE IDCVE NameSeverity.NETCVE-2024-21386.NET Denial of Provider VulnerabilityNecessary.NETCVE-2024-21404.NET Denial of Provider VulnerabilityNecessaryAzure Energetic ListingCVE-2024-21401Microsoft Entra Jira Unmarried-Signal-On Plugin Elevation of Privilege VulnerabilityNecessaryAzure Energetic ListingCVE-2024-21381Microsoft Azure Energetic Listing B2C Spoofing VulnerabilityNecessaryAzure Hooked up Gadget AgentCVE-2024-21329Azure Hooked up Gadget Agent Elevation of Privilege VulnerabilityNecessaryAzure DevOpsCVE-2024-20667Azure DevOps Server Far flung Code Execution VulnerabilityNecessaryAzure Record SyncCVE-2024-21397Microsoft Azure Record Sync Elevation of Privilege VulnerabilityNecessaryAzure Website online RestorationCVE-2024-21364Microsoft Azure Website online Restoration Elevation of Privilege VulnerabilityReasonableAzure StackCVE-2024-20679Azure Stack Hub Spoofing VulnerabilityNecessaryWeb Shortcut InformationCVE-2024-21412Web Shortcut Information Safety Function Bypass VulnerabilityNecessaryMarinerCVE-2024-21626UnknownUnknownMicrosoft ActiveXCVE-2024-21349Microsoft ActiveX Information Gadgets Far flung Code Execution VulnerabilityNecessaryMicrosoft Azure Kubernetes ProviderCVE-2024-21403Microsoft Azure Kubernetes Provider Confidential Container Elevation of Privilege VulnerabilityNecessaryMicrosoft Azure Kubernetes ProviderCVE-2024-21376Microsoft Azure Kubernetes Provider Confidential Container Far flung Code Execution VulnerabilityNecessaryMicrosoft Defender for EndpointCVE-2024-21315Microsoft Defender for Endpoint Coverage Elevation of Privilege VulnerabilityNecessaryMicrosoft DynamicsCVE-2024-21393Microsoft Dynamics 365 (on-premises) Go-site Scripting VulnerabilityNecessaryMicrosoft DynamicsCVE-2024-21389Microsoft Dynamics 365 (on-premises) Go-site Scripting VulnerabilityNecessaryMicrosoft DynamicsCVE-2024-21395Microsoft Dynamics 365 (on-premises) Go-site Scripting VulnerabilityNecessaryMicrosoft DynamicsCVE-2024-21380Microsoft Dynamics Industry Central/NAV Data Disclosure VulnerabilityCrucialMicrosoft DynamicsCVE-2024-21328Dynamics 365 Gross sales Spoofing VulnerabilityNecessaryMicrosoft DynamicsCVE-2024-21394Dynamics 365 Box Provider Spoofing VulnerabilityNecessaryMicrosoft DynamicsCVE-2024-21396Dynamics 365 Gross sales Spoofing VulnerabilityNecessaryMicrosoft DynamicsCVE-2024-21327Microsoft Dynamics 365 Buyer Engagement Go-Website online Scripting VulnerabilityNecessaryMicrosoft Edge (Chromium-based)CVE-2024-1284Chromium: CVE-2024-1284 Use after loose in MojoUnknownMicrosoft Edge (Chromium-based)CVE-2024-21399Microsoft Edge (Chromium-based) Far flung Code Execution VulnerabilityReasonableMicrosoft Edge (Chromium-based)CVE-2024-1060Chromium: CVE-2024-1060 Use after loose in CanvasUnknownMicrosoft Edge (Chromium-based)CVE-2024-1077Chromium: CVE-2024-1077 Use after loose in CommunityUnknownMicrosoft Edge (Chromium-based)CVE-2024-1283Chromium: CVE-2024-1283 Heap buffer overflow in SkiaUnknownMicrosoft Edge (Chromium-based)CVE-2024-1059Chromium: CVE-2024-1059 Use after loose in WebRTCUnknownMicrosoft Alternate ServerCVE-2024-21410Microsoft Alternate Server Elevation of Privilege VulnerabilityCrucialMicrosoft Place of jobCVE-2024-21413Microsoft Outlook Far flung Code Execution VulnerabilityCrucialMicrosoft Place of jobCVE-2024-20673Microsoft Place of job Far flung Code Execution VulnerabilityNecessaryMicrosoft Place of job OneNoteCVE-2024-21384Microsoft Place of job OneNote Far flung Code Execution VulnerabilityNecessaryMicrosoft Place of job OutlookCVE-2024-21378Microsoft Outlook Far flung Code Execution VulnerabilityNecessaryMicrosoft Place of job OutlookCVE-2024-21402Microsoft Outlook Elevation of Privilege VulnerabilityNecessaryMicrosoft Place of job PhraseCVE-2024-21379Microsoft Phrase Far flung Code Execution VulnerabilityNecessaryMicrosoft Groups for AndroidCVE-2024-21374Microsoft Groups for Android Data DisclosureNecessaryMicrosoft WDAC ODBC Motive forceCVE-2024-21353Microsoft WDAC ODBC Motive force Far flung Code Execution VulnerabilityNecessaryMicrosoft WDAC OLE DB supplier for SQLCVE-2024-21370Microsoft WDAC OLE DB supplier for SQL Server Far flung Code Execution VulnerabilityNecessaryMicrosoft WDAC OLE DB supplier for SQLCVE-2024-21350Microsoft WDAC OLE DB supplier for SQL Server Far flung Code Execution VulnerabilityNecessaryMicrosoft WDAC OLE DB supplier for SQLCVE-2024-21368Microsoft WDAC OLE DB supplier for SQL Server Far flung Code Execution VulnerabilityNecessaryMicrosoft WDAC OLE DB supplier for SQLCVE-2024-21359Microsoft WDAC OLE DB supplier for SQL Server Far flung Code Execution VulnerabilityNecessaryMicrosoft WDAC OLE DB supplier for SQLCVE-2024-21365Microsoft WDAC OLE DB supplier for SQL Server Far flung Code Execution VulnerabilityNecessaryMicrosoft WDAC OLE DB supplier for SQLCVE-2024-21367Microsoft WDAC OLE DB supplier for SQL Server Far flung Code Execution VulnerabilityNecessaryMicrosoft WDAC OLE DB supplier for SQLCVE-2024-21420Microsoft WDAC OLE DB supplier for SQL Server Far flung Code Execution VulnerabilityNecessaryMicrosoft WDAC OLE DB supplier for SQLCVE-2024-21366Microsoft WDAC OLE DB supplier for SQL Server Far flung Code Execution VulnerabilityNecessaryMicrosoft WDAC OLE DB supplier for SQLCVE-2024-21369Microsoft WDAC OLE DB supplier for SQL Server Far flung Code Execution VulnerabilityNecessaryMicrosoft WDAC OLE DB supplier for SQLCVE-2024-21375Microsoft WDAC OLE DB supplier for SQL Server Far flung Code Execution VulnerabilityNecessaryMicrosoft WDAC OLE DB supplier for SQLCVE-2024-21361Microsoft WDAC OLE DB supplier for SQL Server Far flung Code Execution VulnerabilityNecessaryMicrosoft WDAC OLE DB supplier for SQLCVE-2024-21358Microsoft WDAC OLE DB supplier for SQL Server Far flung Code Execution VulnerabilityNecessaryMicrosoft WDAC OLE DB supplier for SQLCVE-2024-21391Microsoft WDAC OLE DB supplier for SQL Server Far flung Code Execution VulnerabilityNecessaryMicrosoft WDAC OLE DB supplier for SQLCVE-2024-21360Microsoft WDAC OLE DB supplier for SQL Server Far flung Code Execution VulnerabilityNecessaryMicrosoft WDAC OLE DB supplier for SQLCVE-2024-21352Microsoft WDAC OLE DB supplier for SQL Server Far flung Code Execution VulnerabilityNecessaryMicrosoft Home windowsCVE-2024-21406Home windows Printing Provider Spoofing VulnerabilityNecessaryMicrosoft Home windows DNSCVE-2024-21377Home windows DNS Data Disclosure VulnerabilityNecessaryPosition: DNS ServerCVE-2023-50387MITRE: CVE-2023-50387 DNSSEC verification complexity may also be exploited to exhaust CPU sources and stall DNS resolversNecessaryPosition: DNS ServerCVE-2024-21342Home windows DNS Shopper Denial of Provider VulnerabilityNecessarySkype for IndustryCVE-2024-20695Skype for Industry Data Disclosure VulnerabilityNecessarySQL ServerCVE-2024-21347Microsoft ODBC Motive force Far flung Code Execution VulnerabilityNecessaryRelied on Compute BaseCVE-2024-21304Relied on Compute Base Elevation of Privilege VulnerabilityNecessaryHome windows Hyper-VCVE-2024-20684Home windows Hyper-V Denial of Provider VulnerabilityCrucialHome windows Web Connection Sharing (ICS)CVE-2024-21343Home windows Community Deal with Translation (NAT) Denial of Provider VulnerabilityNecessaryHome windows Web Connection Sharing (ICS)CVE-2024-21348Web Connection Sharing (ICS) Denial of Provider VulnerabilityNecessaryHome windows Web Connection Sharing (ICS)CVE-2024-21357Home windows Pragmatic Common Multicast (PGM) Far flung Code Execution VulnerabilityCrucialHome windows Web Connection Sharing (ICS)CVE-2024-21344Home windows Community Deal with Translation (NAT) Denial of Provider VulnerabilityNecessaryHome windows KernelCVE-2024-21371Home windows Kernel Elevation of Privilege VulnerabilityNecessaryHome windows KernelCVE-2024-21338Home windows Kernel Elevation of Privilege VulnerabilityNecessaryHome windows KernelCVE-2024-21341Home windows Kernel Far flung Code Execution VulnerabilityNecessaryHome windows KernelCVE-2024-21345Home windows Kernel Elevation of Privilege VulnerabilityNecessaryHome windows KernelCVE-2024-21362Home windows Kernel Safety Function Bypass VulnerabilityNecessaryHome windows KernelCVE-2024-21340Home windows Kernel Data Disclosure VulnerabilityNecessaryHome windows LDAP – Light-weight Listing Get admission to ProtocolCVE-2024-21356Home windows Light-weight Listing Get admission to Protocol (LDAP) Denial of Provider VulnerabilityNecessaryHome windows Message QueuingCVE-2024-21363Microsoft Message Queuing (MSMQ) Far flung Code Execution VulnerabilityNecessaryHome windows Message QueuingCVE-2024-21355Microsoft Message Queuing (MSMQ) Elevation of Privilege VulnerabilityNecessaryHome windows Message QueuingCVE-2024-21405Microsoft Message Queuing (MSMQ) Elevation of Privilege VulnerabilityNecessaryHome windows Message QueuingCVE-2024-21354Microsoft Message Queuing (MSMQ) Elevation of Privilege VulnerabilityNecessaryHome windows OLECVE-2024-21372Home windows OLE Far flung Code Execution VulnerabilityNecessaryHome windows SmartScreenCVE-2024-21351Home windows SmartScreen Safety Function Bypass VulnerabilityReasonableHome windows USB Serial Motive forceCVE-2024-21339Home windows USB Generic Mum or dad Motive force Far flung Code Execution VulnerabilityNecessaryHome windows Win32K – ICOMPCVE-2024-21346Win32k Elevation of Privilege VulnerabilityNecessary