Microsoft update

KB5033422

Monthly Rollup

View on Microsoft →

Fixed in

Windows Server 2008 for 32-bit Systems Service Pack 2 6.0.6003.22413
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 6.0.6003.22413
Windows Server 2008 for x64-based Systems Service Pack 2 6.0.6003.22413
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 6.0.6003.22413

Fixes 11 records

TI-2023-18062 CVE-2023-36005 · GHSA-33hq-6mqq-8gjp

Windows Telephony Server Elevation of Privilege Vulnerability

MEDIUM 56

Windows Telephony Server Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.23857 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-591

TI-2023-17747 CVE-2023-35641 · GHSA-4x9j-67cf-fqh5

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

MEDIUM 48

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0722 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-682

TI-2023-17738 CVE-2023-35630 · GHSA-q4pm-gf4h-gpx9

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

MEDIUM 47

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.06127 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-122

TI-2023-17746 CVE-2023-35639 · GHSA-332f-h579-gp2q

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 45

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02368 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-122

TI-2023-17741 CVE-2023-35633 · GHSA-2xc6-pfrf-w5p4

Windows Kernel Elevation of Privilege Vulnerability

MEDIUM 45

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.08698 Published 2023-12-12 Fixed in 10.0.10240.20345, 6.0.6003.22413 +3 CWE-59

TI-2023-18063 CVE-2023-36006 · GHSA-97rh-rq6v-7pc4

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 42

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01891 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-121

TI-2023-17733 CVE-2023-35622 · GHSA-h4pp-j4x6-f6f6

Windows DNS Spoofing Vulnerability

MEDIUM 42

Windows DNS Spoofing Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01563 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +6 CWE-290

TI-2023-18061 CVE-2023-36004 · GHSA-8qjv-8x85-xvqv

Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

LOW 36

Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01369 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-287

TI-2023-18069 CVE-2023-36012 · GHSA-52r5-vp3g-vg7r

DHCP Server Service Information Disclosure Vulnerability

LOW 34

DHCP Server Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01998 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +6 CWE-908

TI-2023-17737 CVE-2023-35629 · GHSA-3fj4-jwj4-55c8

Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

LOW 32

Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00855 Published 2023-12-12 Fixed in 10.0.10240.20345, 6.0.6003.22413 +3 CWE-125

TI-2023-17748 CVE-2023-35642 · GHSA-pmg7-23ph-4pf9

Internet Connection Sharing (ICS) Denial of Service Vulnerability

LOW 31

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01282 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-682