Microsoft February 2024 Patch Tuesday fixes 2 zero-days, 73 flaws

Tag CVE ID CVE Title Severity .NET CVE-2024-21386 .NET Denial of Service Vulnerability Essential .NET CVE-2024-21404 .NET Denial of Service Vulnerability Essential Azure Lively Listing CVE-2024-21401 Microsoft Entra Jira Single-Signal-On Plugin Elevation of Privilege Vulnerability Essential Azure Lively Listing CVE-2024-21381 Microsoft Azure Lively Listing B2C Spoofing Vulnerability Essential Azure Related Machine Agent CVE-2024-21329 Azure Related Machine Agent Elevation of Privilege Vulnerability Essential Azure DevOps CVE-2024-20667 Azure DevOps Server Distant Code Execution Vulnerability Essential Azure File Sync CVE-2024-21397 Microsoft Azure File Sync Elevation of Privilege Vulnerability Essential Azure Website Restoration CVE-2024-21364 Microsoft Azure Website Restoration Elevation of Privilege Vulnerability Average Azure Stack CVE-2024-20679 Azure Stack Hub Spoofing Vulnerability Essential Web Shortcut Information CVE-2024-21412 Web Shortcut Information Safety Function Bypass Vulnerability Essential Mariner CVE-2024-21626 Unknown Unknown Microsoft ActiveX CVE-2024-21349 Microsoft ActiveX Data Objects Distant Code Execution Vulnerability Essential Microsoft Azure Kubernetes Service CVE-2024-21403 Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability Essential Microsoft Azure Kubernetes Service CVE-2024-21376 Microsoft Azure Kubernetes Service Confidential Container Distant Code Execution Vulnerability Essential Microsoft Defender for Endpoint CVE-2024-21315 Microsoft Defender for Endpoint Safety Elevation of Privilege Vulnerability Essential Microsoft Dynamics CVE-2024-21393 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Essential Microsoft Dynamics CVE-2024-21389 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Essential Microsoft Dynamics CVE-2024-21395 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability Essential Microsoft Dynamics CVE-2024-21380 Microsoft Dynamics Enterprise Central/NAV Data Disclosure Vulnerability Essential Microsoft Dynamics CVE-2024-21328 Dynamics 365 Gross sales Spoofing Vulnerability Essential Microsoft Dynamics CVE-2024-21394 Dynamics 365 Discipline Service Spoofing Vulnerability Essential Microsoft Dynamics CVE-2024-21396 Dynamics 365 Gross sales Spoofing Vulnerability Essential Microsoft Dynamics CVE-2024-21327 Microsoft Dynamics 365 Buyer Engagement Cross-Website Scripting Vulnerability Essential Microsoft Edge (Chromium-based) CVE-2024-1284 Chromium: CVE-2024-1284 Use after free in Mojo Unknown Microsoft Edge (Chromium-based) CVE-2024-21399 Microsoft Edge (Chromium-based) Distant Code Execution Vulnerability Average Microsoft Edge (Chromium-based) CVE-2024-1060 Chromium: CVE-2024-1060 Use after free in Canvas Unknown Microsoft Edge (Chromium-based) CVE-2024-1077 Chromium: CVE-2024-1077 Use after free in Community Unknown Microsoft Edge (Chromium-based) CVE-2024-1283 Chromium: CVE-2024-1283 Heap buffer overflow in Skia Unknown Microsoft Edge (Chromium-based) CVE-2024-1059 Chromium: CVE-2024-1059 Use after free in WebRTC Unknown Microsoft Trade Server CVE-2024-21410 Microsoft Trade Server Elevation of Privilege Vulnerability Essential Microsoft Workplace CVE-2024-21413 Microsoft Outlook Distant Code Execution Vulnerability Essential Microsoft Workplace CVE-2024-20673 Microsoft Workplace Distant Code Execution Vulnerability Essential Microsoft Workplace OneNote CVE-2024-21384 Microsoft Workplace OneNote Distant Code Execution Vulnerability Essential Microsoft Workplace Outlook CVE-2024-21378 Microsoft Outlook Distant Code Execution Vulnerability Essential Microsoft Workplace Outlook CVE-2024-21402 Microsoft Outlook Elevation of Privilege Vulnerability Essential Microsoft Workplace Phrase CVE-2024-21379 Microsoft Phrase Distant Code Execution Vulnerability Essential Microsoft Groups for Android CVE-2024-21374 Microsoft Groups for Android Data Disclosure Essential Microsoft WDAC ODBC Driver CVE-2024-21353 Microsoft WDAC ODBC Driver Distant Code Execution Vulnerability Essential Microsoft WDAC OLE DB supplier for SQL CVE-2024-21370 Microsoft WDAC OLE DB supplier for SQL Server Distant Code Execution Vulnerability Essential Microsoft WDAC OLE DB supplier for SQL CVE-2024-21350 Microsoft WDAC OLE DB supplier for SQL Server Distant Code Execution Vulnerability Essential Microsoft WDAC OLE DB supplier for SQL CVE-2024-21368 Microsoft WDAC OLE DB supplier for SQL Server Distant Code Execution Vulnerability Essential Microsoft WDAC OLE DB supplier for SQL CVE-2024-21359 Microsoft WDAC OLE DB supplier for SQL Server Distant Code Execution Vulnerability Essential Microsoft WDAC OLE DB supplier for SQL CVE-2024-21365 Microsoft WDAC OLE DB supplier for SQL Server Distant Code Execution Vulnerability Essential Microsoft WDAC OLE DB supplier for SQL CVE-2024-21367 Microsoft WDAC OLE DB supplier for SQL Server Distant Code Execution Vulnerability Essential Microsoft WDAC OLE DB supplier for SQL CVE-2024-21420 Microsoft WDAC OLE DB supplier for SQL Server Distant Code Execution Vulnerability Essential Microsoft WDAC OLE DB supplier for SQL CVE-2024-21366 Microsoft WDAC OLE DB supplier for SQL Server Distant Code Execution Vulnerability Essential Microsoft WDAC OLE DB supplier for SQL CVE-2024-21369 Microsoft WDAC OLE DB supplier for SQL Server Distant Code Execution Vulnerability Essential Microsoft WDAC OLE DB supplier for SQL CVE-2024-21375 Microsoft WDAC OLE DB supplier for SQL Server Distant Code Execution Vulnerability Essential Microsoft WDAC OLE DB supplier for SQL CVE-2024-21361 Microsoft WDAC OLE DB supplier for SQL Server Distant Code Execution Vulnerability Essential Microsoft WDAC OLE DB supplier for SQL CVE-2024-21358 Microsoft WDAC OLE DB supplier for SQL Server Distant Code Execution Vulnerability Essential Microsoft WDAC OLE DB supplier for SQL CVE-2024-21391 Microsoft WDAC OLE DB supplier for SQL Server Distant Code Execution Vulnerability Essential Microsoft WDAC OLE DB supplier for SQL CVE-2024-21360 Microsoft WDAC OLE DB supplier for SQL Server Distant Code Execution Vulnerability Essential Microsoft WDAC OLE DB supplier for SQL CVE-2024-21352 Microsoft WDAC OLE DB supplier for SQL Server Distant Code Execution Vulnerability Essential Microsoft Home windows CVE-2024-21406 Home windows Printing Service Spoofing Vulnerability Essential Microsoft Home windows DNS CVE-2024-21377 Home windows DNS Data Disclosure Vulnerability Essential Function: DNS Server CVE-2023-50387 MITRE: CVE-2023-50387 DNSSEC verification complexity may be exploited to exhaust CPU assets and stall DNS resolvers Essential Function: DNS Server CVE-2024-21342 Home windows DNS Shopper Denial of Service Vulnerability Essential Skype for Enterprise CVE-2024-20695 Skype for Enterprise Data Disclosure Vulnerability Essential SQL Server CVE-2024-21347 Microsoft ODBC Driver Distant Code Execution Vulnerability Essential Trusted Compute Base CVE-2024-21304 Trusted Compute Base Elevation of Privilege Vulnerability Essential Home windows Hyper-V CVE-2024-20684 Home windows Hyper-V Denial of Service Vulnerability Essential Home windows Web Connection Sharing (ICS) CVE-2024-21343 Home windows Community Deal with Translation (NAT) Denial of Service Vulnerability Essential Home windows Web Connection Sharing (ICS) CVE-2024-21348 Web Connection Sharing (ICS) Denial of Service Vulnerability Essential Home windows Web Connection Sharing (ICS) CVE-2024-21357 Home windows Pragmatic Normal Multicast (PGM) Distant Code Execution Vulnerability Essential Home windows Web Connection Sharing (ICS) CVE-2024-21344 Home windows Community Deal with Translation (NAT) Denial of Service Vulnerability Essential Home windows Kernel CVE-2024-21371 Home windows Kernel Elevation of Privilege Vulnerability Essential Home windows Kernel CVE-2024-21338 Home windows Kernel Elevation of Privilege Vulnerability Essential Home windows Kernel CVE-2024-21341 Home windows Kernel Distant Code Execution Vulnerability Essential Home windows Kernel CVE-2024-21345 Home windows Kernel Elevation of Privilege Vulnerability Essential Home windows Kernel CVE-2024-21362 Home windows Kernel Safety Function Bypass Vulnerability Essential Home windows Kernel CVE-2024-21340 Home windows Kernel Data Disclosure Vulnerability Essential Home windows LDAP – Light-weight Listing Entry Protocol CVE-2024-21356 Home windows Light-weight Listing Entry Protocol (LDAP) Denial of Service Vulnerability Essential Home windows Message Queuing CVE-2024-21363 Microsoft Message Queuing (MSMQ) Distant Code Execution Vulnerability Essential Home windows Message Queuing CVE-2024-21355 Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability Essential Home windows Message Queuing CVE-2024-21405 Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability Essential Home windows Message Queuing CVE-2024-21354 Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability Essential Home windows OLE CVE-2024-21372 Home windows OLE Distant Code Execution Vulnerability Essential Home windows SmartScreen CVE-2024-21351 Home windows SmartScreen Safety Function Bypass Vulnerability Average Home windows USB Serial Driver CVE-2024-21339 Home windows USB Generic Father or mother Driver Distant Code Execution Vulnerability Essential Home windows Win32K – ICOMP CVE-2024-21346 Win32k Elevation of Privilege Vulnerability Essential