Microsoft update

KB5026361

Security Update

View on Microsoft →

Fixed in

Windows 10 Version 20H2 for 32-bit Systems 10.0.19042.2965
Windows 10 Version 20H2 for ARM64-based Systems 10.0.19042.2965
Windows 10 Version 21H2 for 32-bit Systems 10.0.19044.2965
Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.2965
Windows 10 Version 21H2 for x64-based Systems 10.0.19044.2965
Windows 10 Version 22H2 for 32-bit Systems 10.0.19045.2965
Windows 10 Version 22H2 for ARM64-based Systems 10.0.19045.2965
Windows 10 Version 22H2 for x64-based Systems 10.0.19045.2965

Fixes 20 records

TI-2023-10419 CVE-2023-24932 · GHSA-cgcm-2v5q-v3w9

Secure Boot Security Feature Bypass Vulnerability

CRITICAL 89

Secure Boot Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.11819 Published 2023-05-09 Fixed in 10.0.26100.4652, 10.0.17763.7558 +15 CWE-863

TI-2023-13721 CVE-2023-29325 · GHSA-4q85-vm97-c4hf

Windows OLE Remote Code Execution Vulnerability

HIGH 76

Windows OLE Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.83885 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-416

TI-2023-10435 CVE-2023-24949 · GHSA-gqr9-f536-3mhh

Windows Kernel Elevation of Privilege Vulnerability

MEDIUM 57

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.24622 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +5 CWE-190

TI-2023-10429 CVE-2023-24943 · GHSA-25r4-89vx-h95c

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

MEDIUM 50

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04682 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-122

TI-2023-10426 CVE-2023-24940 · GHSA-x3vg-wxqx-p48x

Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

MEDIUM 47

Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05166 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-476

TI-2023-10425 CVE-2023-24939 · GHSA-jmx5-pv6m-gc6h

Server for NFS Denial of Service Vulnerability

MEDIUM 46

Server for NFS Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04656 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +9

TI-2023-10428 CVE-2023-24942 · GHSA-9xmp-232m-h8w6

Remote Procedure Call Runtime Denial of Service Vulnerability

MEDIUM 43

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01898 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-126

TI-2023-10433 CVE-2023-24947 · GHSA-mgf5-4cxg-28fx

Windows Bluetooth Driver Remote Code Execution Vulnerability

LOW 39

Windows Bluetooth Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.007 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.19042.2965 +3 CWE-416

TI-2023-12834 CVE-2023-28283 · GHSA-32r5-g2qx-7q77

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

LOW 37

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00973 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-591

TI-2023-10396 CVE-2023-24905 · GHSA-pmx8-c444-xwf5

Remote Desktop Client Remote Code Execution Vulnerability

LOW 37

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00668 Published 2023-05-09 Fixed in 10.0.19042.2965, 10.0.22000.1936 +3 CWE-284

TI-2023-10394 CVE-2023-24903 · GHSA-8p6h-m3rp-3m5j

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

LOW 37

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00924 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-415

TI-2023-10434 CVE-2023-24948 · GHSA-qqq8-rp9h-4f9h

Windows Bluetooth Driver Elevation of Privilege Vulnerability

LOW 36

Windows Bluetooth Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.4 Adjacent network Low privileges User interaction EPSS 0.00953 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.19042.2965 +7 CWE-122

TI-2023-10432 CVE-2023-24946 · GHSA-xjwj-x359-6hww

Windows Backup Service Elevation of Privilege Vulnerability

LOW 36

Windows Backup Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00444 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.19042.2965 +7 CWE-591

TI-2023-10392 CVE-2023-24901 · GHSA-v2wv-g548-4w4m

Windows NFS Portmapper Information Disclosure Vulnerability

LOW 36

Windows NFS Portmapper Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0159 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +9 CWE-126

TI-2023-13720 CVE-2023-29324 · GHSA-xmv9-mx7p-4jr3

Windows MSHTML Platform Security Feature Bypass Vulnerability

LOW 34

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.02842 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-73

TI-2022-10159 CVE-2022-26928 · GHSA-fhpv-qq2q-633p

Windows Photo Import API Elevation of Privilege Vulnerability

LOW 34

Windows Photo Import API Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00795 Published 2022-09-13 Fixed in 10.0.17763.4131, 10.0.19043.2006 +7 CWE-362

TI-2023-10430 CVE-2023-24944 · GHSA-9j44-phrr-mrv4

Windows Bluetooth Driver Information Disclosure Vulnerability

LOW 30

Windows Bluetooth Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00688 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +5 CWE-843

TI-2023-10391 CVE-2023-24900 · GHSA-62f7-8x8g-3vf6

Windows NTLM Security Support Provider Information Disclosure Vulnerability

LOW 29

Windows NTLM Security Support Provider Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01232 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-125

TI-2023-10431 CVE-2023-24945 · GHSA-64x3-f677-69vx

Windows iSCSI Target Service Information Disclosure Vulnerability

LOW 26

Windows iSCSI Target Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00555 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-190

TI-2023-12811 CVE-2023-28251 · GHSA-jx5h-c6gw-5v74

Windows Driver Revocation List Security Feature Bypass Vulnerability

LOW 25

Windows Driver Revocation List Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00451 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11