Microsoft update

KB5026413

Monthly Rollup

View on Microsoft →

Fixed in

Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.26519
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.26519

Fixes 13 records

TI-2023-13730 CVE-2023-29336 · GHSA-8v67-hw4q-4844

Win32k Elevation of Privilege Vulnerability

CRITICAL 93KEV

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.41185 Published 2023-05-09 Fixed in 10.0.10240.19926, 10.0.14393.5921 +4 CWE-416

TI-2023-13721 CVE-2023-29325 · GHSA-4q85-vm97-c4hf

Windows OLE Remote Code Execution Vulnerability

HIGH 76

Windows OLE Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.83885 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-416

TI-2023-10429 CVE-2023-24943 · GHSA-25r4-89vx-h95c

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

MEDIUM 50

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04682 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-122

TI-2023-10426 CVE-2023-24940 · GHSA-x3vg-wxqx-p48x

Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

MEDIUM 47

Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05166 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-476

TI-2023-10428 CVE-2023-24942 · GHSA-9xmp-232m-h8w6

Remote Procedure Call Runtime Denial of Service Vulnerability

MEDIUM 43

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01898 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-126

TI-2023-12834 CVE-2023-28283 · GHSA-32r5-g2qx-7q77

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

LOW 37

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00973 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-591

TI-2023-10394 CVE-2023-24903 · GHSA-8p6h-m3rp-3m5j

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

LOW 37

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00924 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-415

TI-2023-10432 CVE-2023-24946 · GHSA-xjwj-x359-6hww

Windows Backup Service Elevation of Privilege Vulnerability

LOW 36

Windows Backup Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00444 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.19042.2965 +7 CWE-591

TI-2023-13720 CVE-2023-29324 · GHSA-xmv9-mx7p-4jr3

Windows MSHTML Platform Security Feature Bypass Vulnerability

LOW 34

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.02842 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-73

TI-2023-10395 CVE-2023-24904 · GHSA-wpwh-m3q4-99f6

Windows Installer Elevation of Privilege Vulnerability

LOW 32

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00622 Published 2023-05-09 Fixed in 6.0.6003.22070, 6.1.7601.26519 CWE-59

TI-2023-10391 CVE-2023-24900 · GHSA-62f7-8x8g-3vf6

Windows NTLM Security Support Provider Information Disclosure Vulnerability

LOW 29

Windows NTLM Security Support Provider Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01232 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-125

TI-2023-10431 CVE-2023-24945 · GHSA-64x3-f677-69vx

Windows iSCSI Target Service Information Disclosure Vulnerability

LOW 26

Windows iSCSI Target Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00555 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11 CWE-190

TI-2023-12811 CVE-2023-28251 · GHSA-jx5h-c6gw-5v74

Windows Driver Revocation List Security Feature Bypass Vulnerability

LOW 25

Windows Driver Revocation List Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00451 Published 2023-05-09 Fixed in 10.0.17763.4377, 10.0.20348.1726 +11