近日,微软官方发布了多个安全漏洞的公告,其中微软产品本身漏洞140个,影响到微软产品的其他厂商漏洞5个。包括Microsoft Remote Desktop Client 安全漏洞(CNNVD-202407-739、CVE-2024-38074)、Microsoft Remote Desktop Client 安全漏洞(CNNVD-202407-737、CVE-2024-38076)等多个漏洞。成功利用上述漏洞的攻击者可以在目标系统上执行任意代码、获取用户数据,提升权限等。微软多个产品和系统受漏洞影响。目前,微软官方已经发布了漏洞修复补丁,建议用户及时确认是否受到漏洞影响,尽快采取修补措施。
一、 漏洞介绍
2024年7月9日,微软发布了2024年7月份安全更新,共145个漏洞的补丁程序,CNNVD对这些漏洞进行了收录。本次更新主要涵盖了Microsoft Windows 和 Windows 组件、Microsoft Dynamics 365、Microsoft Remote Desktop Client、Microsoft Windows File Explorer、Microsoft Windows BitLocker、Microsoft Windows PowerShell等。CNNVD对其危害等级进行了评价,其中超危漏洞5个,高危漏洞117个,中危漏洞23个。微软多个产品和系统版本受漏洞影响,具体影响范围可访问微软官方网站查询:
https://portal.msrc.microsoft.com/zh-cn/security-guidance
二、漏洞详情
此次更新共145个漏洞的补丁程序,包括138个新增漏洞的补丁程序、2个更新漏洞的补丁程序和5个影响微软产品的其他厂商漏洞的补丁程序。
此次更新共包括138个新增漏洞的补丁程序,其中超危漏洞4个,高危漏洞114个,中危漏洞20个。
序号 | 漏洞名称 | CNNVD编号 | CVE编号 | 危害等级 | 官方链接 |
1 | Microsoft Remote Desktop Client 安全漏洞 | CNNVD-202407-739 | CVE-2024-38074 | 超危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38074 |
2 | Microsoft Remote Desktop Client 安全漏洞 | CNNVD-202407-737 | CVE-2024-38076 | 超危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38076 |
3 | Microsoft Remote Desktop Client 安全漏洞 | CNNVD-202407-738 | CVE-2024-38077 | 超危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38077 |
4 | Microsoft Defender 安全漏洞 | CNNVD-202407-734 | CVE-2024-38089 | 超危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38089 |
5 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-860 | CVE-2024-20701 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20701 |
6 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-859 | CVE-2024-21303 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21303 |
7 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-858 | CVE-2024-21308 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21308 |
8 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-857 | CVE-2024-21317 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21317 |
9 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-856 | CVE-2024-21331 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21331 |
10 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-855 | CVE-2024-21332 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21332 |
11 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-853 | CVE-2024-21333 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21333 |
12 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-852 | CVE-2024-21335 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21335 |
13 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-851 | CVE-2024-21373 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21373 |
14 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-850 | CVE-2024-21398 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21398 |
15 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-849 | CVE-2024-21414 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21414 |
16 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-848 | CVE-2024-21415 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21415 |
17 | Microsoft Windows 安全漏洞 | CNNVD-202407-847 | CVE-2024-21417 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21417 |
18 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-854 | CVE-2024-21425 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21425 |
19 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-846 | CVE-2024-21428 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21428 |
20 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-845 | CVE-2024-21449 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21449 |
21 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-837 | CVE-2024-28899 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28899 |
22 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-841 | CVE-2024-28928 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28928 |
23 | Microsoft Windows 安全漏洞 | CNNVD-202407-836 | CVE-2024-30013 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30013 |
24 | Microsoft Dynamics 365 安全漏洞 | CNNVD-202407-835 | CVE-2024-30061 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30061 |
25 | Microsoft Windows Remote Access Connection Manager 安全漏洞 | CNNVD-202407-833 | CVE-2024-30079 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30079 |
26 | Microsoft Windows 安全漏洞 | CNNVD-202407-832 | CVE-2024-30081 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30081 |
27 | Microsoft Windows Cryptographic Services 安全漏洞 | CNNVD-202407-831 | CVE-2024-30098 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30098 |
28 | Microsoft .NET Core和Microsoft Visual Studio 安全漏洞 | CNNVD-202407-829 | CVE-2024-30105 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30105 |
29 | Microsoft SharePoint 安全漏洞 | CNNVD-202407-828 | CVE-2024-32987 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-32987 |
30 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-827 | CVE-2024-35256 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35256 |
31 | Microsoft Azure 安全漏洞 | CNNVD-202407-826 | CVE-2024-35261 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35261 |
32 | Microsoft Visual Studio和Microsoft .NET 安全漏洞 | CNNVD-202407-830 | CVE-2024-35264 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35264 |
33 | Microsoft Azure DevOps Server 安全漏洞 | CNNVD-202407-825 | CVE-2024-35266 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35266 |
34 | Microsoft Azure DevOps Server 安全漏洞 | CNNVD-202407-824 | CVE-2024-35267 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35267 |
35 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-822 | CVE-2024-35271 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35271 |
36 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-821 | CVE-2024-35272 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35272 |
37 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-818 | CVE-2024-37318 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37318 |
38 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-817 | CVE-2024-37319 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37319 |
39 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-816 | CVE-2024-37320 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37320 |
40 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-815 | CVE-2024-37321 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37321 |
41 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-814 | CVE-2024-37322 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37322 |
42 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-813 | CVE-2024-37323 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37323 |
43 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-819 | CVE-2024-37324 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37324 |
44 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-812 | CVE-2024-37326 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37326 |
45 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-811 | CVE-2024-37327 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37327 |
46 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-810 | CVE-2024-37328 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37328 |
47 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-809 | CVE-2024-37329 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37329 |
48 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-808 | CVE-2024-37330 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37330 |
49 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-807 | CVE-2024-37331 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37331 |
50 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-805 | CVE-2024-37332 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37332 |
51 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-804 | CVE-2024-37333 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37333 |
52 | Microsoft OLE DB Provider for SQL Server 安全漏洞 | CNNVD-202407-803 | CVE-2024-37334 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37334 |
53 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-802 | CVE-2024-37336 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37336 |
54 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-801 | CVE-2024-37969 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37969 |
55 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-806 | CVE-2024-37970 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37970 |
56 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-800 | CVE-2024-37971 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37971 |
57 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-799 | CVE-2024-37972 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37972 |
58 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-798 | CVE-2024-37973 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37973 |
59 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-797 | CVE-2024-37974 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37974 |
60 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-796 | CVE-2024-37975 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37975 |
61 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-795 | CVE-2024-37977 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37977 |
62 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-793 | CVE-2024-37978 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37978 |
63 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-792 | CVE-2024-37981 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37981 |
64 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-791 | CVE-2024-37984 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37984 |
65 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-790 | CVE-2024-37986 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37986 |
66 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-789 | CVE-2024-37987 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37987 |
67 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-788 | CVE-2024-37988 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37988 |
68 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-794 | CVE-2024-37989 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37989 |
69 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-787 | CVE-2024-38010 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38010 |
70 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-786 | CVE-2024-38011 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38011 |
71 | Microsoft Remote Desktop Client 安全漏洞 | CNNVD-202407-783 | CVE-2024-38015 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38015 |
72 | Microsoft Windows 安全漏洞 | CNNVD-202407-782 | CVE-2024-38019 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38019 |
73 | Microsoft Office 安全漏洞 | CNNVD-202407-779 | CVE-2024-38021 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38021 |
74 | Microsoft Windows 安全漏洞 | CNNVD-202407-778 | CVE-2024-38022 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38022 |
75 | Microsoft SharePoint 安全漏洞 | CNNVD-202407-777 | CVE-2024-38023 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38023 |
76 | Microsoft SharePoint 安全漏洞 | CNNVD-202407-776 | CVE-2024-38024 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38024 |
77 | Microsoft Windows 安全漏洞 | CNNVD-202407-781 | CVE-2024-38025 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38025 |
78 | Microsoft Windows 安全漏洞 | CNNVD-202407-774 | CVE-2024-38028 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38028 |
79 | Microsoft Windows Online Certificate Status Protocol 资源管理错误漏洞 | CNNVD-202407-772 | CVE-2024-38031 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38031 |
80 | Microsoft XBox 安全漏洞 | CNNVD-202407-771 | CVE-2024-38032 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38032 |
81 | Microsoft Windows PowerShell 安全漏洞 | CNNVD-202407-770 | CVE-2024-38033 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38033 |
82 | Microsoft Windows 安全漏洞 | CNNVD-202407-768 | CVE-2024-38034 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38034 |
83 | Microsoft Windows PowerShell 安全漏洞 | CNNVD-202407-766 | CVE-2024-38043 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38043 |
84 | Microsoft Windows 安全漏洞 | CNNVD-202407-765 | CVE-2024-38044 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38044 |
85 | Microsoft Windows PowerShell 安全漏洞 | CNNVD-202407-769 | CVE-2024-38047 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38047 |
86 | Microsoft Windows Workstation 安全漏洞 | CNNVD-202407-762 | CVE-2024-38050 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38050 |
87 | Microsoft Graphics Component 安全漏洞 | CNNVD-202407-761 | CVE-2024-38051 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38051 |
88 | Microsoft Streaming Service 安全漏洞 | CNNVD-202407-760 | CVE-2024-38052 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38052 |
89 | Microsoft Windows 安全漏洞 | CNNVD-202407-759 | CVE-2024-38053 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38053 |
90 | Microsoft Streaming Service 安全漏洞 | CNNVD-202407-757 | CVE-2024-38054 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38054 |
91 | Microsoft Streaming Service 安全漏洞 | CNNVD-202407-754 | CVE-2024-38057 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38057 |
92 | Microsoft Win32k 安全漏洞 | CNNVD-202407-758 | CVE-2024-38059 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38059 |
93 | Microsoft Windows 安全漏洞 | CNNVD-202407-752 | CVE-2024-38060 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38060 |
94 | Microsoft Active Directory Domain Services 安全漏洞 | CNNVD-202407-750 | CVE-2024-38061 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38061 |
95 | Microsoft Windows Kernel Mode Drivers 安全漏洞 | CNNVD-202407-751 | CVE-2024-38062 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38062 |
96 | Microsoft Windows TCP/IP component 安全漏洞 | CNNVD-202407-749 | CVE-2024-38064 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38064 |
97 | Microsoft Win32k 安全漏洞 | CNNVD-202407-747 | CVE-2024-38066 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38066 |
98 | Microsoft Windows Online Certificate Status Protocol 安全漏洞 | CNNVD-202407-745 | CVE-2024-38067 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38067 |
99 | Microsoft Windows Online Certificate Status Protocol 安全漏洞 | CNNVD-202407-744 | CVE-2024-38068 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38068 |
100 | Microsoft Windows 安全漏洞 | CNNVD-202407-743 | CVE-2024-38069 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38069 |
101 | Microsoft Windows 安全漏洞 | CNNVD-202407-742 | CVE-2024-38070 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38070 |
102 | Microsoft Remote Desktop Client 安全漏洞 | CNNVD-202407-741 | CVE-2024-38071 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38071 |
103 | Microsoft Remote Desktop Client 安全漏洞 | CNNVD-202407-746 | CVE-2024-38072 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38072 |
104 | Microsoft Remote Desktop Client 安全漏洞 | CNNVD-202407-740 | CVE-2024-38073 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38073 |
105 | Microsoft XBox 安全漏洞 | CNNVD-202407-736 | CVE-2024-38078 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38078 |
106 | Microsoft Graphics Component 安全漏洞 | CNNVD-202407-735 | CVE-2024-38079 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38079 |
107 | Microsoft Hyper-V 安全漏洞 | CNNVD-202407-733 | CVE-2024-38080 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38080 |
108 | Microsoft Visual Studio和Microsoft .NET 安全漏洞 | CNNVD-202407-732 | CVE-2024-38081 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38081 |
109 | Microsoft Graphics Component 安全漏洞 | CNNVD-202407-731 | CVE-2024-38085 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38085 |
110 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-729 | CVE-2024-38087 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38087 |
111 | Microsoft SQL Server 安全漏洞 | CNNVD-202407-728 | CVE-2024-38088 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38088 |
112 | Microsoft WS-Discovery 安全漏洞 | CNNVD-202407-727 | CVE-2024-38091 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38091 |
113 | Microsoft Azure 安全漏洞 | CNNVD-202407-725 | CVE-2024-38092 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38092 |
114 | Microsoft SharePoint 安全漏洞 | CNNVD-202407-726 | CVE-2024-38094 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094 |
115 | Microsoft Visual Studio和Microsoft .NET 安全漏洞 | CNNVD-202407-724 | CVE-2024-38095 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38095 |
116 | Microsoft Windows File Explorer 安全漏洞 | CNNVD-202407-722 | CVE-2024-38100 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38100 |
117 | Microsoft Windows Fax Service 安全漏洞 | CNNVD-202407-718 | CVE-2024-38104 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38104 |
118 | Microsoft Windows MSHTML Platform 安全漏洞 | CNNVD-202407-716 | CVE-2024-38112 | 高危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38112 |
119 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-840 | CVE-2024-26184 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26184 |
120 | Microsoft Windows Remote Access Connection Manager 安全漏洞 | CNNVD-202407-834 | CVE-2024-30071 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30071 |
121 | Microsoft Windows 安全漏洞 | CNNVD-202407-823 | CVE-2024-35270 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35270 |
122 | Microsoft Windows Server 安全漏洞 | CNNVD-202407-785 | CVE-2024-38013 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38013 |
123 | Microsoft Message Queuing 安全漏洞 | CNNVD-202407-784 | CVE-2024-38017 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38017 |
124 | Microsoft Outlook 安全漏洞 | CNNVD-202407-780 | CVE-2024-38020 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38020 |
125 | Microsoft Line Printer Daemon Service 安全漏洞 | CNNVD-202407-775 | CVE-2024-38027 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38027 |
126 | Microsoft Windows 安全漏洞 | CNNVD-202407-773 | CVE-2024-38030 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38030 |
127 | Microsoft Windows Kernel 安全漏洞 | CNNVD-202407-767 | CVE-2024-38041 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38041 |
128 | Microsoft Windows Network Driver Interface Specification 安全漏洞 | CNNVD-202407-764 | CVE-2024-38048 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38048 |
129 | Microsoft Windows 安全漏洞 | CNNVD-202407-763 | CVE-2024-38049 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38049 |
130 | Microsoft Windows Codecs Library 安全漏洞 | CNNVD-202407-756 | CVE-2024-38055 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38055 |
131 | Microsoft Windows Codecs Library 安全漏洞 | CNNVD-202407-755 | CVE-2024-38056 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38056 |
132 | Microsoft Windows BitLocker 安全漏洞 | CNNVD-202407-753 | CVE-2024-38058 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38058 |
133 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202407-748 | CVE-2024-38065 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38065 |
134 | Microsoft Azure 安全漏洞 | CNNVD-202407-730 | CVE-2024-38086 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38086 |
135 | Microsoft Remote Desktop Client 安全漏洞 | CNNVD-202407-723 | CVE-2024-38099 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38099 |
136 | Microsoft Windows 安全漏洞 | CNNVD-202407-720 | CVE-2024-38101 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38101 |
137 | Microsoft Windows 安全漏洞 | CNNVD-202407-719 | CVE-2024-38102 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38102 |
138 | Microsoft Windows 安全漏洞 | CNNVD-202407-717 | CVE-2024-38105 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38105 |
此次更新共包括2个更新漏洞的补丁程序,其中中危漏洞2个。
序号 | 漏洞名称 | CNNVD编号 | CVE编号 | 危害等级 | 官方链接 |
1 | Microsoft Windows 安全漏洞 | CNNVD-202312-1939 | CVE-2022-44684 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-44684 |
2 | Microsoft Windows Secure Boot 安全漏洞 | CNNVD-202305-767 | CVE-2023-24932 | 中危 | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24932 |
此次更新共包括5个影响微软产品的其他厂商漏洞的补丁程序,其中超危漏洞1个,高危漏洞3个,中危漏洞1个。
序号 | 漏洞名称 | CNNVD编号 | CVE编号 | 危害等级 | 厂商 | 官方链接 |
1 | curl 缓冲区错误漏洞 | CNNVD-202310-917 | CVE-2023-38545 | 超危 | curl | https://github.com/curl/curl/commit/fb4415d8aee6c1 |
2 | RADIUS Protocol under RFC 2865 安全漏洞 | CNNVD-202407-651 | CVE-2024-3596 | 高危 | RFC | https://www.rfc-editor.org/ |
3 | Tencent RapidJSON 安全漏洞 | CNNVD-202407-884 | CVE-2024-38517 | 高危 | 腾讯 | https://www.tencent.com/ |
4 | Tencent RapidJSON 安全漏洞 | CNNVD-202407-883 | CVE-2024-39684 | 高危 | 腾讯 | https://www.tencent.com/ |
5 | Arm product 安全漏洞 | CNNVD-202407-872 | CVE-2024-37985 | 中危 | Arm | https://www.arm.com/ |
三、修复建议
目前,微软官方已经发布补丁修复了上述漏洞,建议用户及时确认漏洞影响,尽快采取修补措施。微软官方补丁下载地址:
https://msrc.microsoft.com/update-guide/en-us