Microsoft update

KB5026370

Security Update

View on Microsoft →

Fixed in

Windows Server 2022 10.0.20348.1726
Windows Server 2022 (Server Core installation) 10.0.20348.1726

Fixes 17 records

TI-2023-10427 CVE-2023-24941 · GHSA-w922-j3ph-rjm7

Windows Network File System Remote Code Execution Vulnerability

CRITICAL 93

Windows Network File System Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.94683 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +3 CWE-908

TI-2023-13721 CVE-2023-29325 · GHSA-4q85-vm97-c4hf

Windows OLE Remote Code Execution Vulnerability

HIGH 76

Windows OLE Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.83885 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-416

TI-2023-10435 CVE-2023-24949 · GHSA-gqr9-f536-3mhh

Windows Kernel Elevation of Privilege Vulnerability

MEDIUM 57

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.24622 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +5 CWE-190

TI-2023-10429 CVE-2023-24943 · GHSA-25r4-89vx-h95c

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

MEDIUM 50

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04682 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-122

TI-2023-10426 CVE-2023-24940 · GHSA-x3vg-wxqx-p48x

Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

MEDIUM 47

Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05166 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-476

TI-2023-10425 CVE-2023-24939 · GHSA-jmx5-pv6m-gc6h

Server for NFS Denial of Service Vulnerability

MEDIUM 46

Server for NFS Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04656 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +9

TI-2023-10428 CVE-2023-24942 · GHSA-9xmp-232m-h8w6

Remote Procedure Call Runtime Denial of Service Vulnerability

MEDIUM 43

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01898 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-126

TI-2023-12834 CVE-2023-28283 · GHSA-32r5-g2qx-7q77

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

LOW 37

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00973 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-591

TI-2023-10394 CVE-2023-24903 · GHSA-8p6h-m3rp-3m5j

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

LOW 37

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00924 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-415

TI-2023-10392 CVE-2023-24901 · GHSA-v2wv-g548-4w4m

Windows NFS Portmapper Information Disclosure Vulnerability

LOW 36

Windows NFS Portmapper Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0159 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +9 CWE-126

TI-2023-13720 CVE-2023-29324 · GHSA-xmv9-mx7p-4jr3

Windows MSHTML Platform Security Feature Bypass Vulnerability

LOW 34

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.02842 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-73

TI-2022-10159 CVE-2022-26928 · GHSA-fhpv-qq2q-633p

Windows Photo Import API Elevation of Privilege Vulnerability

LOW 34

Windows Photo Import API Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00795 Published 2022-09-13 Fixed in 10.0.17763.4131, 10.0.19043.2006 +7 CWE-362

TI-2023-10390 CVE-2023-24899 · GHSA-964r-r86j-r398

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 33

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00339 Published 2023-05-09 Fixed in 10.0.20348.1726, 10.0.22000.1936 +1 CWE-591

TI-2023-10430 CVE-2023-24944 · GHSA-9j44-phrr-mrv4

Windows Bluetooth Driver Information Disclosure Vulnerability

LOW 30

Windows Bluetooth Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00688 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +5 CWE-843

TI-2023-10391 CVE-2023-24900 · GHSA-62f7-8x8g-3vf6

Windows NTLM Security Support Provider Information Disclosure Vulnerability

LOW 29

Windows NTLM Security Support Provider Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01232 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-125

TI-2023-10431 CVE-2023-24945 · GHSA-64x3-f677-69vx

Windows iSCSI Target Service Information Disclosure Vulnerability

LOW 26

Windows iSCSI Target Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00555 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-190

TI-2023-12811 CVE-2023-28251 · GHSA-jx5h-c6gw-5v74

Windows Driver Revocation List Security Feature Bypass Vulnerability

LOW 25

Windows Driver Revocation List Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00451 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11