Microsoft update

KB5034127

Security Update

View on Microsoft →

Fixed in

Windows 10 Version 1809 for 32-bit Systems 10.0.17763.5329
Windows 10 Version 1809 for ARM64-based Systems 10.0.17763.5329
Windows 10 Version 1809 for x64-based Systems 10.0.17763.5329
Windows Server 2019 10.0.17763.5329
Windows Server 2019 (Server Core installation) 10.0.17763.5329

Fixes 33 records

TI-2024-13478 CVE-2024-20666 · GHSA-34wv-gh47-86r8

BitLocker Security Feature Bypass Vulnerability

MEDIUM 64

BitLocker Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.03104 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +8 CWE-20

TI-2024-13485 CVE-2024-20674 · GHSA-37gw-25xx-74f7

Windows Kerberos Security Feature Bypass Vulnerability

MEDIUM 57

Windows Kerberos Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.17168 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-305

TI-2024-14071 CVE-2024-21310 · GHSA-fp7j-p7cw-gqcx

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

MEDIUM 50

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.11602 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-197

TI-2024-14081 CVE-2024-21320 · GHSA-fvh6-48v9-mqh2

Windows Themes Spoofing Vulnerability

MEDIUM 49

Windows Themes Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.226 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +9 CWE-200

TI-2024-13509 CVE-2024-20698 · GHSA-ghfh-q3pc-fx3g

Windows Kernel Elevation of Privilege Vulnerability

MEDIUM 47

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.08647 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-190

TI-2024-13473 CVE-2024-20661 · GHSA-62fm-r774-57v7

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 44

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02759 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-476

TI-2024-13494 CVE-2024-20683 · GHSA-rrrh-8rp4-pgc2

Win32k Elevation of Privilege Vulnerability

MEDIUM 43

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04207 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-416

TI-2024-13511 CVE-2024-20700 · GHSA-fqmm-mm4m-5h74

Windows Hyper-V Remote Code Execution Vulnerability

MEDIUM 42

Windows Hyper-V Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.0395 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-362

TI-2024-13466 CVE-2024-20654 · GHSA-9w5p-cfp8-w353

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 41

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.0199 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-190

TI-2024-13465 CVE-2024-20653 · GHSA-m9vg-87mr-c2rx

Microsoft Common Log File System Elevation of Privilege Vulnerability

MEDIUM 41

Microsoft Common Log File System Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04493 Published 2024-01-09 Fixed in 10.0.25398.643, 10.0.22631.3007 +12 CWE-125

TI-2024-13464 CVE-2024-20652 · GHSA-6j79-xv7w-8g6f

Windows HTML Platforms Security Feature Bypass Vulnerability

MEDIUM 41

Windows HTML Platforms Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02084 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +11 CWE-73

TI-2024-13507 CVE-2024-20696 · GHSA-g5xc-jv8h-2232

Windows libarchive Remote Code Execution Vulnerability

MEDIUM 40

Windows libarchive Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.03154 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-122

TI-2024-14068 CVE-2024-21307 · GHSA-fv65-2c76-4jh9

Remote Desktop Client Remote Code Execution Vulnerability

LOW 39

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01963 Published 2024-01-09 Fixed in 10.0.17763.5329, 1.2.5105.0 +11 CWE-416

TI-2024-13498 CVE-2024-20687 · GHSA-6ch4-5r6m-5v7w

Microsoft AllJoyn API Denial of Service Vulnerability

LOW 38

Microsoft AllJoyn API Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02503 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +8 CWE-125

TI-2024-13493 CVE-2024-20682 · GHSA-hqxc-wrhh-3x6q

Windows Cryptographic Services Remote Code Execution Vulnerability

LOW 37

Windows Cryptographic Services Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00757 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +10 CWE-822

TI-2024-13470 CVE-2024-20658 · GHSA-x5cx-qfrc-rw4r

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

LOW 37

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00706 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +10 CWE-125

TI-2024-13469 CVE-2024-20657 · GHSA-fpg3-7wj3-x58x

Windows Group Policy Elevation of Privilege Vulnerability

LOW 34

Windows Group Policy Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00569 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-284

TI-2024-13467 CVE-2024-20655 · GHSA-c2cf-p6qq-wxrr

Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability

LOW 34

Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.01408 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-416

TI-2024-14075 CVE-2024-21314 · GHSA-8g6x-mrx6-77x2

Microsoft Message Queuing Information Disclosure Vulnerability

LOW 33

Microsoft Message Queuing Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02078 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-125

TI-2024-13491 CVE-2024-20680 · GHSA-85h2-c2jq-7mg4

Windows Message Queuing Client (MSMQC) Information Disclosure

LOW 33

Windows Message Queuing Client (MSMQC) Information Disclosure

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02039 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-822

TI-2024-13476 CVE-2024-20664 · GHSA-jh2h-9mjq-3gvm

Microsoft Message Queuing Information Disclosure Vulnerability

LOW 33

Microsoft Message Queuing Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01997 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-822

TI-2024-13475 CVE-2024-20663 · GHSA-jf4q-23f7-4mp3

Windows Message Queuing Client (MSMQC) Information Disclosure

LOW 33

Windows Message Queuing Client (MSMQC) Information Disclosure

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01925 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-822

TI-2024-13472 CVE-2024-20660 · GHSA-qpjw-c5c3-h83r

Microsoft Message Queuing Information Disclosure Vulnerability

LOW 33

Microsoft Message Queuing Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02039 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-125

TI-2024-14077 CVE-2024-21316 · GHSA-66j8-27jm-c7ff

Windows Server Key Distribution Service Security Feature Bypass

LOW 32

Windows Server Key Distribution Service Security Feature Bypass

CVSS 3.1MEDIUM 6.1 Network High privileges User interaction EPSS 0.01475 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +7 CWE-20

TI-2024-13501 CVE-2024-20690 · GHSA-cx5m-8m85-mm6m

Windows Nearby Sharing Spoofing Vulnerability

LOW 32

Windows Nearby Sharing Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01325 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.22000.2713 +4 CWE-310

TI-2024-13503 CVE-2024-20692 · GHSA-mw57-gv8v-cj4r

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

LOW 28

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.01183 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-326

TI-2024-14074 CVE-2024-21313 · GHSA-9p7x-rvcj-9wg6

Windows TCP/IP Information Disclosure Vulnerability

LOW 27

Windows TCP/IP Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.01499 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-209

TI-2024-13505 CVE-2024-20694 · GHSA-jcxm-cfv5-gp8j

Windows CoreMessaging Information Disclosure Vulnerability

LOW 27

Windows CoreMessaging Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00887 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +7 CWE-908

TI-2024-14072 CVE-2024-21311 · GHSA-7rrh-5xjg-2jmp

Windows Cryptographic Services Information Disclosure Vulnerability

LOW 26

Windows Cryptographic Services Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00783 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-125

TI-2024-13510 CVE-2024-20699 · GHSA-6gw8-36pw-g34w

Windows Hyper-V Denial of Service Vulnerability

LOW 26

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00739 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-755

TI-2024-13474 CVE-2024-20662 · GHSA-5x77-x3qm-5v2f

Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability

LOW 26

Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01921 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-843

TI-2024-14066 CVE-2024-21305 · GHSA-pc6v-rjpx-v6rm

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

LOW 23

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.01494 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-732

TI-2024-13502 CVE-2024-20691 · GHSA-rhpx-9698-w5hr

Windows Themes Information Disclosure Vulnerability

LOW 22

Windows Themes Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00587 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +11 CWE-125