Home › Microsoft Patch Tuesday › July 2024

Microsoft Patch Tuesday, July 2024

·

Microsoft's July 2024 security release, published July 9, 2024: 32 updates fixing 49 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

Still active now. 1 CVE from this release is on the Senserva hot list today (as of 2026-08-30), still ranked among the most dangerous vulnerabilities right now by confirmed exploitation, ransomware use, EPSS, and severity. See the current hot list.
32
Updates (KBs)
49
CVEs fixed
2
On the CISA KEV list
0
Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2024-38112Microsoft Windows MSHTML Platform Spoofing VulnerabilityExploited
CVE-2024-38094Microsoft SharePoint Deserialization VulnerabilityExploitedRansomware Hot now

Other high-risk CVEs (CVSS 8.8+)

CVE-2024-38021Microsoft Outlook Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-38088SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-38087SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-21332SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-21333SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-21335SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-21373SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-21398SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-21414SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-21415SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-21428SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVSS 8.8
CVE-2024-37318SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVSS 8.8

Products fixed this month

Microsoft Visual Studio 2022 version 17.4 (15)Microsoft Visual Studio 2022 version 17.6 (14)Microsoft Visual Studio 2022 version 17.8 (14)Microsoft SQL Server 2019 for x64-based Systems (GDR) (10)Microsoft SQL Server 2017 for x64-based Systems (GDR) (8)Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR) (8)Microsoft SharePoint Enterprise Server 2016 (3)Microsoft SharePoint Server 2019 (3)Microsoft SharePoint Server Subscription Edition (3)Microsoft Office 2019 for 32-bit editions (2)

Every update in this release

All 32 update articles, worst first: anything on the CISA KEV list, then by highest CVSS. Each row links our page for the update, Microsoft's support article, and the Update Catalog for a standalone download.

UpdateSeverityMax CVSSCVEs fixedProductsAlso
KB5040426 ExploitedHigh7.51Windows 10 Version 22H2 for x64-based Systems, Windows 11 Version 23H2 for x64-based Systems, Windows 10 for 32-bit SystemsSupport · Catalog
KB5002618 Exploited RansomwareHigh7.54Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription EditionSupport · Catalog
KB5002615 Exploited RansomwareHigh7.54Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription EditionSupport · Catalog
KB5002606 Exploited RansomwareHigh7.54Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription EditionSupport · Catalog
KB5002620High8.82Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit SystemsSupport · Catalog
KB5040942High8.836Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5040986High8.838Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5040946High8.837Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5040944High8.837Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5040940High8.837Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5040936High8.838Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5040939High8.838Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5040948High8.838Microsoft SQL Server 2017 for x64-based Systems (GDR), Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)Support · Catalog
KB5040712High8.81Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft OLE DB Driver 19 for SQL ServerSupport · Catalog
KB5040711High8.81Microsoft SQL Server 2019 for x64-based Systems (GDR), Microsoft SQL Server 2022 for x64-based Systems (GDR), Microsoft OLE DB Driver 19 for SQL ServerSupport · Catalog
KB5041081High8.13.NET 6.0, .NET 8.0, Microsoft Visual Studio 2022 version 17.4Support · Catalog
KB5041080High7.52Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8Support · Catalog
KB5037940High7.31Microsoft Dynamics 365 (on-premises) version 9.1Support · Catalog
KB5041022High7.31Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8Support · Catalog
KB5041023High7.31Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8Support · Catalog
KB5041016High7.31Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8Support · Catalog
KB5041020High7.31Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8Support · Catalog
KB5041018High7.31Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8Support · Catalog
KB5039895High7.31Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8Support · Catalog
KB5041019High7.31Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8Support · Catalog
KB5041024High7.31Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8Support · Catalog
KB5041027High7.31Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8Support · Catalog
KB5041021High7.31Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8Support · Catalog
KB5041026High7.31Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8Support · Catalog
KB5039885High7.31Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8Support · Catalog
KB5041017High7.31Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, Microsoft Visual Studio 2022 version 17.8Support · Catalog
KB5002621Medium6.51Microsoft Office 2019 for 32-bit editions, Microsoft Office 2019 for 64-bit editions, Microsoft 365 Apps for Enterprise for 32-bit SystemsSupport · Catalog
Take this release to your AI

Composed from the July 2024 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

See every Patch Tuesday, all months  |  The live Microsoft patch tracker

August 2024 →

Now see the same thing in your own tenant.

Siemserva by Senserva reads your Microsoft 365, Intune, Defender, and Entra ID environment and returns every missing update ranked by what is actually being exploited, alongside all 650+ configuration checks.

1Find it2Fix it3Prove it
Start my free auditAll you do is register.
Reference: Microsoft CVE and vulnerability management, ranked by real-world risk, and the Microsoft patching guide.
Data notice: this page is provided as is, for informational purposes only, without warranty of any kind. Senserva, LLC does not guarantee the accuracy, completeness, or timeliness of third-party data (MSRC, NVD, CISA KEV, EPSS) and accepts no liability for actions taken based on it; verify against the authoritative Microsoft advisory before acting. Built daily with Senserva Trustworthy AI. All use of this data is subject to the Senserva EULA.