Microsoft update

KB5028240

Monthly Rollup

View on Microsoft →

Fixed in

Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.26623
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.26623

Fixes 55 records

TI-2023-18662 CVE-2023-36874 · GHSA-j95h-qvx8-jp23

Windows Error Reporting Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.42564 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-59

TI-2023-15351 CVE-2023-32046 · GHSA-6g7j-q2fm-9g6r

Windows MSHTML Platform Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows MSHTML Platform Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.09969 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10

TI-2023-15361 CVE-2023-32057 · GHSA-3p9w-cf27-62fv

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

MEDIUM 53

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02207 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-20

TI-2023-17704 CVE-2023-35366 · GHSA-vprf-7c8r-mgc2

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 52

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01689 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-20

TI-2023-17703 CVE-2023-35365 · GHSA-768m-86pq-jxm6

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 52

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01768 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-20

TI-2023-17705 CVE-2023-35367 · GHSA-2h3v-mhq3-rf2w

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 46

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01689 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-20

TI-2023-16331 CVE-2023-33154 · GHSA-pw39-fr77-mc42

Windows Partition Management Driver Elevation of Privilege Vulnerability

MEDIUM 44

Windows Partition Management Driver Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00791 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-367

TI-2023-17677 CVE-2023-35338 · GHSA-9m3p-jcwj-fgwg

Windows Peer Name Resolution Protocol Denial of Service Vulnerability

MEDIUM 43

Windows Peer Name Resolution Protocol Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01961 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-476

TI-2023-17670 CVE-2023-35330 · GHSA-xv87-56gx-3f4x

Windows Extended Negotiation Denial of Service Vulnerability

MEDIUM 43

Windows Extended Negotiation Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01861 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +9 CWE-126

TI-2023-17663 CVE-2023-35322 · GHSA-4j2q-mx4g-ppwf

Windows Deployment Services Remote Code Execution Vulnerability

MEDIUM 43

Windows Deployment Services Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01386 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-121

TI-2023-17645 CVE-2023-35303 · GHSA-vpc7-vq8w-p94m

USB Audio Class System Driver Remote Code Execution Vulnerability

MEDIUM 43

USB Audio Class System Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01454 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-20

TI-2023-17643 CVE-2023-35300 · GHSA-6x84-85qm-g3mj

Remote Procedure Call Runtime Remote Code Execution Vulnerability

MEDIUM 43

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01386 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-416

TI-2023-15343 CVE-2023-32038 · GHSA-97hj-39wf-25fm

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01236 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-416

TI-2023-15350 CVE-2023-32045 · GHSA-hppg-98q6-r92c

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 42

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01519 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-15349 CVE-2023-32044 · GHSA-8x32-mp9p-q4c3

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 42

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01519 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2022-17740 CVE-2022-38023 · GHSA-vww6-8mc9-cqg6

Netlogon RPC Elevation of Privilege Vulnerability

MEDIUM 40

Netlogon RPC Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02749 Published 2022-11-09 Partial fix · 6.0.6003.22175, 6.1.7601.26623 +5

TI-2023-17640 CVE-2023-35297 · GHSA-qpq5-9xxj-wrcw

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

LOW 39

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01118 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-843

TI-2023-17681 CVE-2023-35342 · GHSA-5x9j-qq7v-qfgj

Windows Image Acquisition Elevation of Privilege Vulnerability

LOW 37

Windows Image Acquisition Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00494 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +9 CWE-59

TI-2023-17653 CVE-2023-35312 · GHSA-w28h-vj63-44qh

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability

LOW 37

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00494 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +9 CWE-190

TI-2023-15357 CVE-2023-32053 · GHSA-xvch-pp92-23j8

Windows Installer Elevation of Privilege Vulnerability

LOW 37

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00484 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +9 CWE-59

TI-2023-17689 CVE-2023-35350 · GHSA-hfgr-2rrw-vrp6

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

LOW 36

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01223 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-122

TI-2023-17679 CVE-2023-35340 · GHSA-h2p6-vc37-qj4h

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

LOW 36

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00273 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-591

TI-2023-17668 CVE-2023-35328 · GHSA-7frx-552p-qxq9

Windows Transaction Manager Elevation of Privilege Vulnerability

LOW 36

Windows Transaction Manager Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00428 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-197

TI-2023-17650 CVE-2023-35309 · GHSA-f764-h978-44hh

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00791 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-591

TI-2023-17642 CVE-2023-35299 · GHSA-868r-pqhj-vm2g

Windows Common Log File System Driver Elevation of Privilege Vulnerability

LOW 36

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00411 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-16350 CVE-2023-33173 · GHSA-7qfg-wv73-x2cw

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 36

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-126

TI-2023-16349 CVE-2023-33172 · GHSA-qrw4-mx3q-78mq

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 36

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-126

TI-2023-16346 CVE-2023-33169 · GHSA-x7v2-mcmg-3x6c

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 36

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-126

TI-2023-16345 CVE-2023-33168 · GHSA-4f7g-j96w-63jv

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 36

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-126

TI-2023-16344 CVE-2023-33167 · GHSA-r72j-wvhj-623m

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 36

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-126

TI-2023-16343 CVE-2023-33166 · GHSA-fgg8-m57m-85xf

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 36

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-126

TI-2023-15358 CVE-2023-32054 · GHSA-792f-5x2v-grw4

Volume Shadow Copy Elevation of Privilege Vulnerability

LOW 36

Volume Shadow Copy Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00914 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +8 CWE-36

TI-2023-15347 CVE-2023-32042 · GHSA-2m4m-q2r2-j2j5

OLE Automation Information Disclosure Vulnerability

LOW 36

OLE Automation Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01342 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-908

TI-2023-15341 CVE-2023-32035 · GHSA-vrjj-c4c5-8q9x

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 36

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-15340 CVE-2023-32034 · GHSA-j2xm-9hq6-xxrp

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 36

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-16340 CVE-2023-33163 · GHSA-h5jj-9q44-xpqv

Windows Network Load Balancing Remote Code Execution Vulnerability

LOW 35

Windows Network Load Balancing Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00384 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +4 CWE-591

TI-2023-15339 CVE-2023-32033 · GHSA-jp98-p5wv-pj25

Microsoft Failover Cluster Remote Code Execution Vulnerability

LOW 35

Microsoft Failover Cluster Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00937 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-416

TI-2023-07926 CVE-2023-21526 · GHSA-7pjm-g8hr-8rg2

Windows Netlogon Information Disclosure Vulnerability

LOW 35

Windows Netlogon Information Disclosure Vulnerability

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01125 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10

TI-2023-17672 CVE-2023-35332 · GHSA-g2v9-hqc4-rfwv

Windows Remote Desktop Protocol Security Feature Bypass

LOW 33

Windows Remote Desktop Protocol Security Feature Bypass

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00502 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +9 CWE-326

TI-2023-15354 CVE-2023-32050 · GHSA-chwr-r87h-3fhf

Windows Installer Elevation of Privilege Vulnerability

LOW 33

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00395 Published 2023-07-11 Fixed in 6.0.6003.22175, 6.1.7601.26623 CWE-59

TI-2023-15348 CVE-2023-32043 · GHSA-xrrv-33fc-mq2w

Windows Remote Desktop Security Feature Bypass Vulnerability

LOW 33

Windows Remote Desktop Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00508 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-327

TI-2023-17690 CVE-2023-35351 · GHSA-m6w2-chv8-mqrq

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

LOW 32

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00698 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-416

TI-2023-17685 CVE-2023-35346 · GHSA-63hm-fq62-wc3p

Windows DNS Server Remote Code Execution Vulnerability

LOW 32

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00698 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-591

TI-2023-17684 CVE-2023-35345 · GHSA-5vvx-qpjq-rghx

Windows DNS Server Remote Code Execution Vulnerability

LOW 32

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00698 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-591

TI-2023-17683 CVE-2023-35344 · GHSA-92g4-xrf5-h8q5

Windows DNS Server Remote Code Execution Vulnerability

LOW 32

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00698 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-591

TI-2023-17662 CVE-2023-35321 · GHSA-fpv8-w764-c49r

Windows Deployment Services Denial of Service Vulnerability

LOW 32

Windows Deployment Services Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01557 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-170

TI-2023-17660 CVE-2023-35319 · GHSA-343m-w9r4-x3c4

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 32

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0163 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-17659 CVE-2023-35318 · GHSA-6vfv-jcwm-5q6m

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 32

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0163 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-17657 CVE-2023-35316 · GHSA-8225-98gw-gjwg

Remote Procedure Call Runtime Information Disclosure Vulnerability

LOW 32

Remote Procedure Call Runtime Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01404 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-17655 CVE-2023-35314 · GHSA-963c-6f32-46f5

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 32

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0163 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-17651 CVE-2023-35310 · GHSA-4v3v-mrjj-3599

Windows DNS Server Remote Code Execution Vulnerability

LOW 32

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00658 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-591

TI-2023-16341 CVE-2023-33164 · GHSA-7hrj-g29v-92x3

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 32

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0163 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-15359 CVE-2023-32055 · GHSA-gw4f-q547-r9mg

Active Template Library Elevation of Privilege Vulnerability

LOW 32

Active Template Library Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0036 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-416

TI-2023-17680 CVE-2023-35341 · GHSA-mg67-853h-3538

Microsoft DirectMusic Information Disclosure Vulnerability

LOW 28

Microsoft DirectMusic Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00504 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +9 CWE-190

TI-2023-16351 CVE-2023-33174 · GHSA-f836-ch4g-q4pw

Windows Cryptographic Information Disclosure Vulnerability

LOW 26

Windows Cryptographic Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00683 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-200