Microsoft update

KB5029259

Security Update

View on Microsoft →

Fixed in

Microsoft .NET Framework 3.5 and 4.6.2 10.0.10240.20107
Windows 10 for 32-bit Systems 10.0.10240.20107
Windows 10 for x64-based Systems 10.0.10240.20107

Fixes 29 records

TI-2023-18670 CVE-2023-36884 · GHSA-gwrc-vqcf-v9v4

Windows Search Remote Code Execution Vulnerability

CRITICAL 92KEV

Windows Search Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.99439 Published 2023-07-11 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-362

TI-2023-18684 CVE-2023-36899 · GHSA-fvh3-94pw-fvcc

ASP.NET Elevation of Privilege Vulnerability

HIGH 79

ASP.NET Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.76714 Published 2023-08-08 Fixed in 2.0.50727.8974, 10.0.10240.20107 +6 CWE-20

TI-2023-18661 CVE-2023-36873 · GHSA-xrx4-g976-77rm

.NET Framework Spoofing Vulnerability

HIGH 66

.NET Framework Spoofing Vulnerability

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01504 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +5 CWE-20

TI-2023-18694 CVE-2023-36910 · GHSA-5vgj-hqrc-gx52

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

MEDIUM 54

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0251 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-190

TI-2023-17720 CVE-2023-35385 · GHSA-whhx-jc9m-vw4h

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

MEDIUM 54

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02485 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-190

TI-2023-18695 CVE-2023-36911 · GHSA-xqp9-w6xm-qf2v

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

MEDIUM 52

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01705 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-190

TI-2023-17697 CVE-2023-35359 · GHSA-f6j6-4j57-f83g

Windows Kernel Elevation of Privilege Vulnerability

MEDIUM 48

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.09888 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-23

TI-2023-18685 CVE-2023-36900 · GHSA-qh2x-6w4c-qxp3

Windows Common Log File System Driver Elevation of Privilege Vulnerability

MEDIUM 47

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.10168 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-190

TI-2023-18687 CVE-2023-36903 · GHSA-crf4-cpc3-935q

Windows System Assessment Tool Elevation of Privilege Vulnerability

MEDIUM 46

Windows System Assessment Tool Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01629 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +9 CWE-59

TI-2023-17721 CVE-2023-35386 · GHSA-fhv3-5p89-vfc8

Windows Kernel Elevation of Privilege Vulnerability

MEDIUM 45

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.05547 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +6 CWE-125

TI-2023-17718 CVE-2023-35383 · GHSA-5qfj-773w-84hp

Microsoft Message Queuing Information Disclosure Vulnerability

MEDIUM 44

Microsoft Message Queuing Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03011 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-190

TI-2023-17716 CVE-2023-35381 · GHSA-q9v9-492r-q87w

Windows Fax Service Remote Code Execution Vulnerability

MEDIUM 44

Windows Fax Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01913 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-190

TI-2023-19589 CVE-2023-38172 · GHSA-35wh-q52w-78vq

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 43

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0197 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-126

TI-2023-18696 CVE-2023-36912 · GHSA-cwxh-83m5-5h37

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 43

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02066 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-20

TI-2023-18668 CVE-2023-36882 · GHSA-7w82-6wqx-9r39

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01409 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-416

TI-2023-17715 CVE-2023-35380 · GHSA-3vj2-7455-cq23

Windows Kernel Elevation of Privilege Vulnerability

MEDIUM 42

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03577 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-416

TI-2023-17722 CVE-2023-35387 · GHSA-r3h2-76p7-jwr7

Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability

MEDIUM 40

Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Adjacent network No auth User interaction EPSS 0.0106 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +7 CWE-191

TI-2023-19599 CVE-2023-38184 · GHSA-68pc-r3j9-h8x2

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

LOW 38

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01463 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-416

TI-2023-18690 CVE-2023-36906 · GHSA-w5hv-qvq6-g6wg

Windows Cryptographic Services Information Disclosure Vulnerability

LOW 37

Windows Cryptographic Services Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0199 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-170

TI-2023-18697 CVE-2023-36913 · GHSA-hxpc-gw6v-6gwc

Microsoft Message Queuing Information Disclosure Vulnerability

LOW 36

Microsoft Message Queuing Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01693 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-908

TI-2023-18691 CVE-2023-36907 · GHSA-mf8r-h4c9-q93r

Windows Cryptographic Services Information Disclosure Vulnerability

LOW 36

Windows Cryptographic Services Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01733 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-170

TI-2023-18689 CVE-2023-36905 · GHSA-32hv-227c-chpv

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

LOW 36

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01747 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +5 CWE-125

TI-2023-18693 CVE-2023-36909 · GHSA-mv3g-pwv2-rfxp

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

LOW 33

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02064 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-191

TI-2023-17712 CVE-2023-35377 · GHSA-j82f-chfp-3hrg

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

LOW 33

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02208 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-20

TI-2023-17711 CVE-2023-35376 · GHSA-7j77-rcrw-mhm8

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

LOW 33

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02208 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-20

TI-2023-19666 CVE-2023-38254 · GHSA-hh4j-cm3f-5mf6

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

LOW 32

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01639 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-20

TI-2023-17719 CVE-2023-35384 · GHSA-mw3f-jhxv-c95j

Windows HTML Platforms Security Feature Bypass Vulnerability

LOW 32

Windows HTML Platforms Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01572 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +7 CWE-73

TI-2023-18692 CVE-2023-36908 · GHSA-f4r6-49fh-5c4m

Windows Hyper-V Information Disclosure Vulnerability

LOW 31

Windows Hyper-V Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00965 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +9 CWE-200

TI-2023-18674 CVE-2023-36889 · GHSA-j3hx-c9h6-63vv

Windows Group Policy Security Feature Bypass Vulnerability

LOW 26

Windows Group Policy Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00628 Published 2023-08-08 Fixed in 10.0.10240.20107, 10.0.14393.6167 +10 CWE-284