Microsoft Schwachstellen

Zeitverlauf

Typ

Produkt

Microsoft Windows5038
Microsoft Internet Explorer1171
Microsoft Edge959
Microsoft Office472
Microsoft SharePoint Server211

Massnahmen

Official Fix9567
Temporary Fix1
Workaround24
Unavailable69
Not Defined339

Ausnutzbarkeit

High410
Functional41
Proof-of-Concept1478
Unproven3225
Not Defined4846

Zugriffsart

Not Defined0
Physical77
Local1707
Adjacent236
Network7980

Authentisierung

Not Defined0
High373
Low4121
None5506

Benutzeraktivität

Not Defined0
Required4223
None5777

C3BM Index

CVSSv3 Base

≤10
≤20
≤317
≤4184
≤51150
≤61639
≤72437
≤82821
≤91321
≤10431

CVSSv3 Temp

≤10
≤20
≤351
≤4304
≤51504
≤62235
≤72872
≤82152
≤9623
≤10259

VulDB

≤10
≤23
≤3130
≤4526
≤51336
≤61061
≤73320
≤81836
≤91330
≤10458

NVD

≤10
≤20
≤310
≤448
≤5319
≤6777
≤7471
≤82349
≤9572
≤10120

CNA

≤10
≤20
≤34
≤416
≤5106
≤6211
≤7440
≤81010
≤9407
≤1058

Hersteller

≤10
≤20
≤317
≤462
≤5864
≤6702
≤7997
≤82549
≤9691
≤10116

Research

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤81
≤91
≤100

Exploit 0-day

<1k9
<2k11
<5k183
<10k726
<25k2385
<50k3123
<100k3032
≥100k531

Exploit heute

<1k3768
<2k677
<5k1248
<10k1802
<25k2428
<50k63
<100k14
≥100k0

Exploitmarktvolumen

🔴 CTI Aktivitäten

Affected Products (411): .NET (44), .NET Core (23), .NET Core SDK (1), .NET Education Bundle SDK Install Tool (1), .NET Framework (135), .NET Install Tool for Extension Authors (1), 3D Builder (20), 3D Viewer (10), 4K Wireless Display Adapter (1), 365 Apps for Enterprise (25), @azure-ms-rest-nodeauth (1), ADAL.NET (1), ASP.NET (10), ASP.NET Core (27), ASP.NET Core MVC (2), ASP.NET MVC (1), ASP .NET SignalR (1), AV1 Video Extension (6), Access (10), Accessibility Insights (1), Accessibility Insights for Web (1), Active Directory Federation Services (1), Anti-cross Site Scripting Library (1), App Installer (1), Application Inspector (1), Arc Cluster Extension (1), Authentication Library (1), Authenticator (1), AutoUpdate for Mac (1), Azure (5), Azure AD (1), Azure AD B2C (1), Azure AD Connect (1), Azure AI Playground (1), Azure AI Search (1), Azure API Management Service (1), Azure ARC (1), Azure Active Directory (1), Azure Active Directory B2C (1), Azure Active Directory Connect (2), Azure Active Directory Passport (1), Azure App Service (3), Azure App Service on Azure Stack Hub (1), Azure Arc-Enabled Servers (1), Azure Arc-enabled Kubernetes Cluster (1), Azure Arc Jumpstart (1), Azure Automation (3), Azure Automation State Configuration (1), Azure Automation Update Management (2), Azure Bastion (1), Azure Batch (1), Azure CLI (2), Azure Cognitive Search (1), Azure Command-Line Interface (1), Azure Compute Gallery (1), Azure Connected Machine Agent (2), Azure Container Instance (1), Azure Container Registry (1), Azure CycleCloud (5), Azure Data Box Gateway (1), Azure Data Explorer (1), Azure Data Studio (1), Azure DevOps Server (39), Azure Diagnostics (1), Azure Digital Twins Explorer (1), Azure EFLOW (1), Azure File Sync (2), Azure Front Door (1), Azure Function Apps (1), Azure Functions (2), Azure Guest Configuration (1), Azure HDInsights (8), Azure Health Bot Service (4), Azure Identity Library (1), Azure Identity Library for .NET (1), Azure Identity SDK (1), Azure Identity SDK for .NET (1), Azure IoT CLI Extension (1), Azure IoT Edge (2), Azure IoT SDK (1), Azure Kinect SDK (1), Azure Kubernetes Service (5), Azure Kubernetes Service Confidential Container (1), Azure Kubernetes Service Confidential Containers (3), Azure Linux Guest Agent (1), Azure Logic Apps (2), Azure Machine Learning (2), Azure Machine Learning SDK (1), Azure Machine Learning Service (1), Azure Migrate (3), Azure Monitor Agent (3), Azure Network Watcher VM Extension (3), Azure On-Premises Data Gateway (1), Azure Open Management Infrastructure (5), Azure Pack Rollup (1), Azure Pipelines Agent (1), Azure Private 5G Core (1), Azure RTOS (6), Azure RTOS GUIX (1), Azure RTOS GUIX Studio (2), Azure RTOS USBX (2), Azure Real Time Operating System GUIX Studio (8), Azure Resource Manager (1), Azure SDK (1), Azure SDK for .NET (1), Azure SDK for Java (1), Azure SSH Keypairs (1), Azure Science Virtual Machine (1), Azure Security Center (2), Azure Sentinel (2), Azure Service Connector (1), Azure Service Fabric (5), Azure Service Fabric Explorer (1), Azure Site Recovery (3), Azure Site Recovery VMWare to Azure (80), Azure Sphere (30), Azure Spring Cloud (1), Azure Stack (1), Azure Stack Edge (2), Azure Stack Hub (2), Azure StorSimple 8000 (1), Azure Storage Blobs Client Library (2), Azure Storage Movement Client Library (1), Azure Storage Mover Agent (1), Azure setup-kubectl (1), Bing (1), Bing Search (3), BizTalk ESB Toolkit (1), Bond (1), Bot Framework SDK (2), Business Productivity Servers (1), C SDK for Azure IoT (2), ChakraCore (207), Chakra Core (5), Chess Titan (1), Clarity (1), Clarity Plugin (1), Common Data Model SDK (1), Common Utilities (1), Compiled HTML Help (1), Container Monitoring Solution (2), Data.OData (1), Data Access Components (2), Defender (1), Defender Antimalware Platform (1), Defender Security Intelligence Updates (2), Defender for Endpoint (4), Defender for Endpoint for Windows (1), Defender for IoT (20), Desktop Client for Mac (1), Diagnostics Troubleshooting Wizard (1), Directx (1), Dynamics (1), Dynamics 365 (71), Dynamics 365 BC On Premise (2), Dynamics 365 Business Central (13), Dynamics 365 Commerce (1), Dynamics 365 Customer Engagement (2), Dynamics 365 Customer Insights (2), Dynamics 365 Field Service (1), Dynamics 365 Unified Service Desk (1), Dynamics 365 for Finance (2), Dynamics 365 for Finance and Operations (6), Dynamics 365 on-premises (1), Dynamics AX (2), Dynamics CRM (4), Dynamics GP (7), Dynamics NAV (8), Edge (959), Endpoint Configuration Manager (1), Endpoint Protection (1), Enhanced Mitigation Experience Toolkit EMET (1), Entra Jira Single-Sign-On Plugin (1), Excel (175), Excel 2010 SP2 (1), Exchange (14), Exchange Server (148), Expression Design (1), FAST ESP (1), FSLogix (1), File Checksum Integrity Verifier (1), Forefront Endpoint Protection (6), Forefront Security for Exchange Server (1), Forefront Threat Management Gateway (1), Forefront Unified Access Gateway (12), FrontPage (1), GitHub Pull Requests and Issues Extension (1), Graph (1), Groove (1), HEIF Image Extension (2), HEVC Video Extensions (42), HoloLens 1 (1), Host Integration Server (2), Host Integration Server 2020 (1), Hub Device Client SDK for Azure IoT (1), Hyper-V (13), IIS (19), Identity Linux Broker (1), Identity Manager (1), Identity Model (1), Infopath (2), Internet Explorer (1171), Intune Company Portal (1), Intune Management Extension (2), Intune Portal (1), Intune for Android Mobile Application Management (1), JScript (1), Jarvis (1), Java SDK for Azure IoT (2), Jupyter Extension for Visual Studio Code (2), Kubernetes Tools (1), Log Analytics Agent (2), Lync (21), Lync Server (12), Lync for Mac (1), MPEG-2 Video Extension (1), MSRT (1), Mail Client (1), Malicious Software Removal Tool (2), Malware Protection Engine (15), Maven for Java Extension (1), Media Player (2), Microsoft Authentication Library (1), Microsoft Dynamics 365 (1), Microsoft Malware Protection Platform (1), Microsoft OLE DB Provider for DB2 V7 (1), Mono (1), Mono Framework (1), Network Watcher Agent Virtual Machine Extension for Linux (1), Nokia Asha 501 (1), NuGet (3), ODBC Driver (20), ODBC Driver for SQL Server (5), OLE DB (1), OLE DB Driver (29), OLE DB Driver for SQL Server (1), Office (472), Office 365 (4), Office 365 ProPlus (1), Office App (1), Office Compability Pack (1), Office Compatibility Pack (11), Office Excel (4), Office LTSC (4), Office Online Server (11), Office Picture Manager (1), Office Web Apps (10), Office Web Apps Server (8), Office for Mac 2011 (1), On-Prem Data Gateway (1), On-Premises Data Gateway (1), OneDrive (13), OneNote (7), Open Enclave SDK (3), Open Management Infrastructure (2), Open XML File Format Converter (1), Operations (2), Operations Management Suite Agent (1), Outlook (59), Outlook.com (1), Outlook Web Access (1), Outlook Web App (1), Package Manager Configurations (1), Paint 3D (6), PandocUpload (1), Passport-SAML (1), Photos (1), Power Apps (2), Power Automate (1), Power BI (1), PowerBI-Client JS SDK (1), PowerBI-client JS SDK (1), Power BI Report Server (6), Power Platform (3), PowerPoint (31), PowerPoint Viewer (1), PowerShell (2), PowerShell Core (1), PowerShell Editor Services (1), PowerShell Extension for Visual Studio Code (1), PowerShellGet (1), Powerpoint (1), Print 3D (1), Printer Metadata Troubleshooter Tool (1), Process Explorer (1), Project (4), Project Server (3), Publisher (16), Publisher 2003 (9), Python Extension for Visual Studio Code (1), Quantum Development Kit for Visual Studio Code (1), RMS Sharing for Mac (1), RTOS GUIX (3), Raw Image Extension (14), Remote Desktop (1), Remote Desktop Connection Client (1), Remote Desktop Connection Manager (1), Remote Desktop For Mac (1), Research JavaScript Cryptography Library (2), Rome SDK (2), SCS Add-on (1), SQL Server (116), SQL Server 2017 Reporting Services (1), SQL Server 2019 Reporting Services (1), SQL Server Backend for Django (1), SQL Server Management Studio (6), Security Essentials (9), Security Essentials Antimalware Engine (2), Send Customer Voice survey from Dynamics 365 (1), Send Customer Voice survey from Dynamics 365 App (1), Service Fabric (1), SharePoint (64), SharePoint Enterprise Server (132), SharePoint Foundation (62), SharePoint Server (211), SharePoint Services (1), Sharepoint (6), Silverlight (17), Skype (15), Skype Extension (1), Skype for Android (1), Skype for Business (15), Skype for Business Server (14), Skype for Consumer (1), Snip & Sketch (1), Snipping Tool (1), Software for Open Networking in the Cloud (1), Sterling Connect Direct (1), Surface Hub (1), Surface Pro (1), SysInternals Sysmon (1), Sysinternals Process Monitor (1), Sysinternals PsExec (1), System Center (1), System Center Endpoint Protection (8), System Center Operations Manager (10), System Center Virtual Machine Manager (1), Systems Management Server (1), Team Foundation Server (23), Teams (10), Teams Admin Center (1), Tech Companion (1), VBScript (1), VISIO (1), VP9 Video Extensions (7), Virtual PC (2), Visio (20), Visio Viewer (6), Visual C++ (1), Visual C++ Redistributable (1), Visual Studio (148), Visual Studio Code (45), Visual Studio Code Live Share Extension (1), Visual Studio Code Remote Containers Extension (1), Visual Studio Code WSL Extension (1), Visual Studio Community (1), Visual Studio Team Foundation Server (1), WMI Administrative Tools (1), Web Media Extensions (1), WebP Image Extension (1), Windows (5038), Windows 10 Update Assistant (2), Windows Admin Center (2), Windows Azure Sdk (1), Windows Defender (9), Windows Defender Antimalware Platform (2), Windows Embedded (1), Windows Essentials (1), Windows Host Compute (1), Windows Live Messenger (1), Windows Live Movie Maker (1), Windows Live OneCare (1), Windows Media Center (2), Windows Media Center TV Pack (1), Windows Media Encoder (1), Windows Media Player (7), Windows Modern Mail (1), Windows Movie Maker (2), Windows Phone (2), Windows Server (1), Windows Subsystem for Linux (1), Windows Sysmon (1), Windows Upgrade Assistant (1), Wireless Desktop 2000 (1), Wireless Display Adapter V2 (1), Wireless Keyboard (2), Word (93), Word 2003 (1), WordPad (1), Word Viewer (3), Works (1), XML Core Services (6), Xamarin.Forms (1), Xbox Gaming Services (1), Xbox Live (1), Xerte (1), YARP (2), Yammer (1), YourPhone App (1), az functionapp config appsettings delete (1), az functionapp config appsettings set (1), az logicapp config appsettings delete (1), az logicapp config appsettings set (1), az staticwebapp appsettings delete (1), az staticwebapp appsettings set (1), az webapp config appsettings delete (1), az webapp config appsettings set (1), msgraph-sdk-php (1), msgraph-sdk-php-core (1), typed-rest-client (1), workspace-tools (1)

Link to Vendor Website: https://www.microsoft.com/

VeröffentlichtBaseTempSchwachstelleProdAusMasEPSSCTICVE
09.07.20247.57.2Microsoft Windows MSHTML Platform Information DisclosureOperating SystemHighOfficial Fix0.016490.19CVE-2024-38112
09.07.20246.56.0Microsoft Windows Layer-2 Bridge Network Driver Denial of ServiceOperating SystemUnprovenOfficial Fix0.000560.13CVE-2024-38105
09.07.20248.88.1Microsoft Windows Fax Service PufferüberlaufOperating SystemUnprovenOfficial Fix0.001060.31CVE-2024-38104
09.07.20246.56.0Microsoft Windows Layer-2 Bridge Network Driver Information DisclosureOperating SystemUnprovenOfficial Fix0.000560.13CVE-2024-38102
09.07.20246.56.0Microsoft Windows Layer-2 Bridge Network Driver Information DisclosureOperating SystemUnprovenOfficial Fix0.000560.13CVE-2024-38101
09.07.20247.87.1Microsoft Windows File Explorer erweiterte RechteOperating SystemUnprovenOfficial Fix0.000430.09CVE-2024-38100
09.07.20245.95.4Microsoft Windows Remote Desktop Licensing Service schwache AuthentisierungOperating SystemUnprovenOfficial Fix0.000630.09CVE-2024-38099
09.07.20247.56.8Microsoft .NET/Visual Studio Denial of ServiceProgramming Tool SoftwareUnprovenOfficial Fix0.000630.05CVE-2024-38095
09.07.20247.26.7Microsoft SharePoint Server erweiterte RechteGroupware SoftwareProof-of-ConceptOfficial Fix0.000920.10CVE-2024-38094
09.07.20248.88.2Microsoft Azure CycleCloud erweiterte RechteCloud SoftwareProof-of-ConceptOfficial Fix0.000500.05CVE-2024-38092
09.07.20247.56.8Microsoft Windows WS-Discovery Denial of ServiceOperating SystemUnprovenOfficial Fix0.000460.05CVE-2024-38091
09.07.20249.38.7Microsoft Defender for IoT erweiterte RechteUnbekanntUnprovenOfficial Fix0.000500.14CVE-2024-38089
09.07.20248.87.7Microsoft SQL Server Native Client OLE DB Provider PufferüberlaufDatabase SoftwareUnprovenOfficial Fix0.000910.04CVE-2024-38088
09.07.20248.87.7Microsoft SQL Server Native Client OLE DB Provider PufferüberlaufDatabase SoftwareUnprovenOfficial Fix0.000910.09CVE-2024-38087
09.07.20246.45.9Microsoft Azure Kinect SDK Local Privilege EscalationCloud SoftwareUnprovenOfficial Fix0.000530.05CVE-2024-38086
09.07.20247.87.1Microsoft Windows Graphics PufferüberlaufOperating SystemUnprovenOfficial Fix0.000430.14CVE-2024-38085
09.07.20247.66.6Microsoft .NET/.NET Framework/Visual Studio erweiterte RechteProgramming Tool SoftwareUnprovenOfficial Fix0.000430.05CVE-2024-38081
09.07.20247.87.4Microsoft Windows Hyper-V PufferüberlaufOperating SystemHighOfficial Fix0.000510.15CVE-2024-38080
09.07.20247.87.1Microsoft Windows Graphics PufferüberlaufOperating SystemUnprovenOfficial Fix0.000430.14CVE-2024-38079
09.07.20247.57.0Microsoft Windows Xbox Wireless Adapter PufferüberlaufOperating SystemUnprovenOfficial Fix0.000530.05CVE-2024-38078
09.07.20249.88.9Microsoft Windows Remote Desktop Licensing Service PufferüberlaufOperating SystemUnprovenOfficial Fix0.000910.44CVE-2024-38077
09.07.20249.88.9Microsoft Windows Remote Desktop Licensing Service PufferüberlaufOperating SystemUnprovenOfficial Fix0.000910.14CVE-2024-38076
09.07.20249.88.9Microsoft Windows Remote Desktop Licensing Service PufferüberlaufOperating SystemUnprovenOfficial Fix0.000910.67CVE-2024-38074
09.07.20247.56.8Microsoft Windows Remote Desktop Licensing Service Information DisclosureOperating SystemUnprovenOfficial Fix0.000460.26CVE-2024-38073
09.07.20247.56.8Microsoft Windows Remote Desktop Licensing Service Denial of ServiceOperating SystemUnprovenOfficial Fix0.000460.04CVE-2024-38072
09.07.20247.56.8Microsoft Windows Remote Desktop Licensing Service Denial of ServiceOperating SystemUnprovenOfficial Fix0.000630.22CVE-2024-38071
09.07.20247.87.1Microsoft Windows LockDown Policy erweiterte RechteOperating SystemUnprovenOfficial Fix0.000430.05CVE-2024-38070
09.07.20247.06.4Microsoft Windows Enroll Engine schwache AuthentisierungOperating SystemUnprovenOfficial Fix0.000430.17CVE-2024-38069
09.07.20247.56.8Microsoft Windows Online Certificate Status Protocol Denial of ServiceOperating SystemUnprovenOfficial Fix0.000630.09CVE-2024-38068
09.07.20247.56.8Microsoft Windows Online Certificate Status Protocol Server Denial of ServiceOperating SystemUnprovenOfficial Fix0.000630.09CVE-2024-38067
09.07.20248.17.4Microsoft Windows Win32k PufferüberlaufOperating SystemUnprovenOfficial Fix0.000540.00CVE-2024-38066
09.07.20246.86.2Microsoft Windows Secure Boot PufferüberlaufOperating SystemUnprovenOfficial Fix0.000510.13CVE-2024-38065
09.07.20247.56.8Microsoft Windows TCP/IP Information DisclosureOperating SystemUnprovenOfficial Fix0.001370.05CVE-2024-38064
09.07.20247.87.1Microsoft Windows Kernel-Mode Driver Information DisclosureOperating SystemUnprovenOfficial Fix0.000480.05CVE-2024-38062
09.07.20247.56.8Microsoft Windows DCOM erweiterte RechteOperating SystemUnprovenOfficial Fix0.000930.22CVE-2024-38061
09.07.20248.88.1Microsoft Windows Imaging PufferüberlaufOperating SystemUnprovenOfficial Fix0.000950.14CVE-2024-38060
09.07.20247.87.1Microsoft Windows Win32k PufferüberlaufOperating SystemUnprovenOfficial Fix0.000590.00CVE-2024-38059
09.07.20246.86.2Microsoft Windows BitLocker erweiterte RechteOperating SystemUnprovenOfficial Fix0.000510.14CVE-2024-38058
09.07.20247.87.1Microsoft Windows Kernel Streaming WOW Thunk Service Driver Information DisclosureOperating SystemUnprovenOfficial Fix0.000480.13CVE-2024-38057
09.07.20244.84.4Microsoft Windows Codecs Library Information DisclosureOperating SystemUnprovenOfficial Fix0.000480.04CVE-2024-38056
09.07.20245.55.0Microsoft Windows Codecs Library Information DisclosureOperating SystemUnprovenOfficial Fix0.000480.09CVE-2024-38055
09.07.20247.87.1Microsoft Windows Kernel Streaming WOW Thunk Service Driver PufferüberlaufOperating SystemUnprovenOfficial Fix0.000430.13CVE-2024-38054
09.07.20248.88.1Microsoft Windows Layer-2 Bridge Network Driver PufferüberlaufOperating SystemUnprovenOfficial Fix0.000630.26CVE-2024-38053
09.07.20247.87.1Microsoft Windows Kernel Streaming WOW Thunk Service Driver Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.000480.09CVE-2024-38052
09.07.20247.87.1Microsoft Windows Graphics PufferüberlaufOperating SystemUnprovenOfficial Fix0.000500.10CVE-2024-38051
09.07.20247.87.1Microsoft Windows Workstation Service PufferüberlaufOperating SystemUnprovenOfficial Fix0.000430.09CVE-2024-38050
09.07.20247.06.6Microsoft Windows Distributed Transaction Coordinator erweiterte RechteOperating SystemUnprovenOfficial Fix0.002790.09CVE-2024-38049
09.07.20246.56.0Microsoft Windows Network Driver Interface Specification Information DisclosureOperating SystemUnprovenOfficial Fix0.000560.04CVE-2024-38048
09.07.20247.87.1Microsoft Windows PowerShell Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.000480.00CVE-2024-38047
09.07.20247.26.6Microsoft Windows DHCP Server Service Privilege EscalationOperating SystemUnprovenOfficial Fix0.000920.04CVE-2024-38044

9950 weitere Einträge werden nicht mehr angezeigt

Interested in the pricing of exploits?

See the underground prices here!