Microsoft update

KB5034119

Security Update

View on Microsoft →

Fixed in

Microsoft .NET Framework 3.5 AND 4.7.2 10.0.14393.6614
Windows 10 Version 1607 for 32-bit Systems 10.0.14393.6614
Windows 10 Version 1607 for x64-based Systems 10.0.14393.6614
Windows Server 2016 10.0.14393.6614
Windows Server 2016 (Server Core installation) 10.0.14393.6614

Fixes 30 records

TI-2024-19239 CVE-2024-29059 · GHSA-pg2q-wfgh-r323

.NET Framework Information Disclosure Vulnerability

CRITICAL 90KEV

.NET Framework Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.98624 Published 2024-03-22 Fixed in 4.8.04690.02, 4.7.04081.03 +4 CWE-209

TI-2024-13478 CVE-2024-20666 · GHSA-34wv-gh47-86r8

BitLocker Security Feature Bypass Vulnerability

MEDIUM 64

BitLocker Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.03104 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +8 CWE-20

TI-2024-13485 CVE-2024-20674 · GHSA-37gw-25xx-74f7

Windows Kerberos Security Feature Bypass Vulnerability

MEDIUM 57

Windows Kerberos Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.17168 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-305

TI-2024-00056 CVE-2024-0057 · GHSA-68w7-72jg-6qpp

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

MEDIUM 54

NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02778 Published 2024-01-09 Fixed in 8.0.1, 7.0.15 +25 CWE-20

TI-2024-14081 CVE-2024-21320 · GHSA-fvh6-48v9-mqh2

Windows Themes Spoofing Vulnerability

MEDIUM 49

Windows Themes Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.226 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +9 CWE-200

TI-2024-13473 CVE-2024-20661 · GHSA-62fm-r774-57v7

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 44

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02759 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-476

TI-2024-13494 CVE-2024-20683 · GHSA-rrrh-8rp4-pgc2

Win32k Elevation of Privilege Vulnerability

MEDIUM 43

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04207 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-416

TI-2024-00055 CVE-2024-0056 · GHSA-98g6-xh36-x2p7

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

MEDIUM 42

Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.0118 Published 2024-01-09 Fixed in 16.0.1110.1, 6.0.26 +17 CWE-319

TI-2024-13466 CVE-2024-20654 · GHSA-9w5p-cfp8-w353

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 41

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.0199 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-190

TI-2024-13465 CVE-2024-20653 · GHSA-m9vg-87mr-c2rx

Microsoft Common Log File System Elevation of Privilege Vulnerability

MEDIUM 41

Microsoft Common Log File System Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04493 Published 2024-01-09 Fixed in 10.0.25398.643, 10.0.22631.3007 +12 CWE-125

TI-2024-13464 CVE-2024-20652 · GHSA-6j79-xv7w-8g6f

Windows HTML Platforms Security Feature Bypass Vulnerability

MEDIUM 41

Windows HTML Platforms Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02084 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +11 CWE-73

TI-2024-14073 CVE-2024-21312 · GHSA-3qxp-wv2v-jfc4

.NET Framework Denial of Service Vulnerability

LOW 39

.NET Framework Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03578 Published 2024-01-09 Fixed in 4.8.09214.01, 4.8.04690.02 +3 CWE-20

TI-2024-14068 CVE-2024-21307 · GHSA-fv65-2c76-4jh9

Remote Desktop Client Remote Code Execution Vulnerability

LOW 39

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01963 Published 2024-01-09 Fixed in 10.0.17763.5329, 1.2.5105.0 +11 CWE-416

TI-2024-13498 CVE-2024-20687 · GHSA-6ch4-5r6m-5v7w

Microsoft AllJoyn API Denial of Service Vulnerability

LOW 38

Microsoft AllJoyn API Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02503 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +8 CWE-125

TI-2024-13493 CVE-2024-20682 · GHSA-hqxc-wrhh-3x6q

Windows Cryptographic Services Remote Code Execution Vulnerability

LOW 37

Windows Cryptographic Services Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00757 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +10 CWE-822

TI-2024-13470 CVE-2024-20658 · GHSA-x5cx-qfrc-rw4r

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

LOW 37

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00706 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +10 CWE-125

TI-2024-13469 CVE-2024-20657 · GHSA-fpg3-7wj3-x58x

Windows Group Policy Elevation of Privilege Vulnerability

LOW 34

Windows Group Policy Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00569 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-284

TI-2024-13467 CVE-2024-20655 · GHSA-c2cf-p6qq-wxrr

Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability

LOW 34

Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.01408 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-416

TI-2024-14075 CVE-2024-21314 · GHSA-8g6x-mrx6-77x2

Microsoft Message Queuing Information Disclosure Vulnerability

LOW 33

Microsoft Message Queuing Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02078 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-125

TI-2024-13491 CVE-2024-20680 · GHSA-85h2-c2jq-7mg4

Windows Message Queuing Client (MSMQC) Information Disclosure

LOW 33

Windows Message Queuing Client (MSMQC) Information Disclosure

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02039 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-822

TI-2024-13476 CVE-2024-20664 · GHSA-jh2h-9mjq-3gvm

Microsoft Message Queuing Information Disclosure Vulnerability

LOW 33

Microsoft Message Queuing Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01997 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-822

TI-2024-13475 CVE-2024-20663 · GHSA-jf4q-23f7-4mp3

Windows Message Queuing Client (MSMQC) Information Disclosure

LOW 33

Windows Message Queuing Client (MSMQC) Information Disclosure

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01925 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-822

TI-2024-13472 CVE-2024-20660 · GHSA-qpjw-c5c3-h83r

Microsoft Message Queuing Information Disclosure Vulnerability

LOW 33

Microsoft Message Queuing Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02039 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-125

TI-2024-14077 CVE-2024-21316 · GHSA-66j8-27jm-c7ff

Windows Server Key Distribution Service Security Feature Bypass

LOW 32

Windows Server Key Distribution Service Security Feature Bypass

CVSS 3.1MEDIUM 6.1 Network High privileges User interaction EPSS 0.01475 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +7 CWE-20

TI-2024-13503 CVE-2024-20692 · GHSA-mw57-gv8v-cj4r

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

LOW 28

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.01183 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-326

TI-2024-14074 CVE-2024-21313 · GHSA-9p7x-rvcj-9wg6

Windows TCP/IP Information Disclosure Vulnerability

LOW 27

Windows TCP/IP Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.01499 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-209

TI-2024-13505 CVE-2024-20694 · GHSA-jcxm-cfv5-gp8j

Windows CoreMessaging Information Disclosure Vulnerability

LOW 27

Windows CoreMessaging Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00887 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +7 CWE-908

TI-2024-14072 CVE-2024-21311 · GHSA-7rrh-5xjg-2jmp

Windows Cryptographic Services Information Disclosure Vulnerability

LOW 26

Windows Cryptographic Services Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00783 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-125

TI-2024-13474 CVE-2024-20662 · GHSA-5x77-x3qm-5v2f

Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability

LOW 26

Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01921 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-843

TI-2024-13502 CVE-2024-20691 · GHSA-rhpx-9698-w5hr

Windows Themes Information Disclosure Vulnerability

LOW 22

Windows Themes Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00587 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +11 CWE-125