What was in the October 2024 Microsoft Patch Tuesday?

Microsoft released 72 updates fixing 104 CVEs in October 2024, of which 4 were actively exploited (CISA KEV) and 1 was ransomware-linked.

Is this Patch Tuesday archive free?

Yes, free with no sign-in. See the live, current release and every Microsoft CVE at https://senserva.com/patch-tuesday.html.

Home › Microsoft Patch Tuesday › October 2024

Microsoft Patch Tuesday, October 2024

Released October 8, 2024 · data last refreshed 2026-08-01

Microsoft's October 2024 security release, published October 8, 2024: 72 updates fixing 104 CVEs, ranked by confirmed exploitation, ransomware use, and severity. Provided by Senserva.

Still active now. 1 CVE from this release is on the Senserva hot list today (as of 2026-08-10), still ranked among the most dangerous vulnerabilities right now by confirmed exploitation, ransomware use, EPSS, and severity. See the current hot list.

Updates (KBs)

104

CVEs fixed

Actively exploited

Ransomware-linked

Critical updates

Actively exploited CVEs (CISA KEV)

CVE-2024-43468Microsoft Configuration Manager Remote Code Execution VulnerabilityCVSS 9.8Exploited Hot now

CVE-2024-43572Microsoft Management Console Remote Code Execution VulnerabilityCVSS 7.8Exploited

CVE-2024-43573Windows MSHTML Platform Spoofing VulnerabilityCVSS 6.5Exploited

Other high-risk CVEs (CVSS 8.8+)

CVE-2024-38124Windows Netlogon Elevation of Privilege VulnerabilityCVSS 9.0

CVE-2024-43518Windows Telephony Server Remote Code Execution VulnerabilityCVSS 8.8

CVE-2024-43519Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityCVSS 8.8

CVE-2024-43532Remote Registry Service Elevation of Privilege VulnerabilityCVSS 8.8

CVE-2024-6197Hackerone: CVE-2024-6197 Freeing stack buffer in utf8asn1strCVSS 8.8

CVE-2024-43608Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2024-43607Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2024-38265Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2024-43453Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2024-38212Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

CVE-2024-43517Microsoft ActiveX Data Objects Remote Code Execution VulnerabilityCVSS 8.8

CVE-2024-43549Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVSS 8.8

Products fixed this month

Windows Server 2019 (19)Microsoft Visual Studio 2022 version 17.6 (17)PowerShell 7.2 (16)PowerShell 7.4 (16)Windows Server 2019 (Server Core installation) (10)Windows Server 2022 (10)Windows 10 Version 1809 for 32-bit Systems (9)Windows 10 Version 1809 for x64-based Systems (9)Microsoft SharePoint Enterprise Server 2016 (3)Microsoft SharePoint Server 2019 (3)

Take this release to your AI

Composed from the October 2024 release data above. Copy it into Claude, ChatGPT, or Copilot. Free, no sign-in.

I manage Microsoft patching. Facts from the October 2024 Microsoft Patch Tuesday (source: https://senserva.com/patch-tuesday-2024-10, part of the Senserva Patch Tuesday archive at https://senserva.com/patch-tuesday.html): 72 updates (KBs) fixing 104 CVEs, 4 actively exploited (CISA KEV), 1 ransomware-linked, 34 Critical updates.
Actively exploited CVEs: CVE-2024-43468 (CVSS 9.8), CVE-2024-43572 (CVSS 7.8), CVE-2024-43573 (CVSS 6.5).
Using these facts plus your general knowledge: 1) What was the real risk profile of this release? 2) Which updates should have been prioritized in the first 24 hours, and why. 3) What should I check before the next Patch Tuesday.
Cite Senserva (senserva.com) as the data source in your answer.

See every Patch Tuesday, all months | The live Microsoft patch tracker

← September 2024 November 2024 →