Microsoft update

KB5034130

Security Update

View on Microsoft →

Fixed in

Windows Server 2022, 23H2 Edition (Server Core installation) 10.0.25398.643

Fixes 35 records

TI-2024-13508 CVE-2024-20697 · GHSA-w6xv-37jv-7cjr

Windows libarchive Remote Code Execution Vulnerability

HIGH 72

Windows libarchive Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.72163 Published 2024-01-09 Fixed in 10.0.22621.3007, 10.0.22631.3007 +1 CWE-122

TI-2024-13478 CVE-2024-20666 · GHSA-34wv-gh47-86r8

BitLocker Security Feature Bypass Vulnerability

MEDIUM 64

BitLocker Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.03104 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +8 CWE-20

TI-2024-13485 CVE-2024-20674 · GHSA-37gw-25xx-74f7

Windows Kerberos Security Feature Bypass Vulnerability

MEDIUM 57

Windows Kerberos Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.17168 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-305

TI-2024-14071 CVE-2024-21310 · GHSA-fp7j-p7cw-gqcx

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

MEDIUM 50

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.11602 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-197

TI-2024-13509 CVE-2024-20698 · GHSA-ghfh-q3pc-fx3g

Windows Kernel Elevation of Privilege Vulnerability

MEDIUM 47

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.08647 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-190

TI-2024-13473 CVE-2024-20661 · GHSA-62fm-r774-57v7

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 44

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02759 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-476

TI-2024-13494 CVE-2024-20683 · GHSA-rrrh-8rp4-pgc2

Win32k Elevation of Privilege Vulnerability

MEDIUM 43

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04207 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-416

TI-2024-13511 CVE-2024-20700 · GHSA-fqmm-mm4m-5h74

Windows Hyper-V Remote Code Execution Vulnerability

MEDIUM 42

Windows Hyper-V Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.0395 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-362

TI-2024-13466 CVE-2024-20654 · GHSA-9w5p-cfp8-w353

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 41

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.0199 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-190

TI-2024-13465 CVE-2024-20653 · GHSA-m9vg-87mr-c2rx

Microsoft Common Log File System Elevation of Privilege Vulnerability

MEDIUM 41

Microsoft Common Log File System Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04493 Published 2024-01-09 Fixed in 10.0.25398.643, 10.0.22631.3007 +12 CWE-125

TI-2024-13464 CVE-2024-20652 · GHSA-6j79-xv7w-8g6f

Windows HTML Platforms Security Feature Bypass Vulnerability

MEDIUM 41

Windows HTML Platforms Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02084 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +11 CWE-73

TI-2024-13507 CVE-2024-20696 · GHSA-g5xc-jv8h-2232

Windows libarchive Remote Code Execution Vulnerability

MEDIUM 40

Windows libarchive Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.03154 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-122

TI-2024-13498 CVE-2024-20687 · GHSA-6ch4-5r6m-5v7w

Microsoft AllJoyn API Denial of Service Vulnerability

LOW 38

Microsoft AllJoyn API Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02503 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +8 CWE-125

TI-2024-14070 CVE-2024-21309 · GHSA-rx9g-96r8-m5g4

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

LOW 37

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00757 Published 2024-01-09 Fixed in 10.0.20348.2227, 10.0.22000.2713 +3 CWE-191

TI-2024-13497 CVE-2024-20686 · GHSA-wwcg-p45r-pv65

Win32k Elevation of Privilege Vulnerability

LOW 37

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00671 Published 2024-01-09 Fixed in 10.0.25398.643 CWE-591

TI-2024-13493 CVE-2024-20682 · GHSA-hqxc-wrhh-3x6q

Windows Cryptographic Services Remote Code Execution Vulnerability

LOW 37

Windows Cryptographic Services Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00757 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +10 CWE-822

TI-2024-13492 CVE-2024-20681 · GHSA-3p2x-fgmw-32pv

Windows Subsystem for Linux Elevation of Privilege Vulnerability

LOW 37

Windows Subsystem for Linux Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.007 Published 2024-01-09 Fixed in 10.0.20348.2227, 10.0.22000.2713 +5 CWE-416

TI-2024-13470 CVE-2024-20658 · GHSA-x5cx-qfrc-rw4r

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

LOW 37

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00706 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +10 CWE-125

TI-2024-14067 CVE-2024-21306 · GHSA-6fjx-3c25-3qrc

Microsoft Bluetooth Driver Spoofing Vulnerability

LOW 36

Microsoft Bluetooth Driver Spoofing Vulnerability

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.0583 Published 2024-01-09 Fixed in 10.0.20348.2227, 10.0.22000.2713 +5 CWE-306

TI-2024-13469 CVE-2024-20657 · GHSA-fpg3-7wj3-x58x

Windows Group Policy Elevation of Privilege Vulnerability

LOW 34

Windows Group Policy Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00569 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-284

TI-2024-13467 CVE-2024-20655 · GHSA-c2cf-p6qq-wxrr

Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability

LOW 34

Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.01408 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-416

TI-2024-14075 CVE-2024-21314 · GHSA-8g6x-mrx6-77x2

Microsoft Message Queuing Information Disclosure Vulnerability

LOW 33

Microsoft Message Queuing Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02078 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-125

TI-2024-13491 CVE-2024-20680 · GHSA-85h2-c2jq-7mg4

Windows Message Queuing Client (MSMQC) Information Disclosure

LOW 33

Windows Message Queuing Client (MSMQC) Information Disclosure

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02039 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-822

TI-2024-13476 CVE-2024-20664 · GHSA-jh2h-9mjq-3gvm

Microsoft Message Queuing Information Disclosure Vulnerability

LOW 33

Microsoft Message Queuing Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01997 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-822

TI-2024-13475 CVE-2024-20663 · GHSA-jf4q-23f7-4mp3

Windows Message Queuing Client (MSMQC) Information Disclosure

LOW 33

Windows Message Queuing Client (MSMQC) Information Disclosure

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01925 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-822

TI-2024-13472 CVE-2024-20660 · GHSA-qpjw-c5c3-h83r

Microsoft Message Queuing Information Disclosure Vulnerability

LOW 33

Microsoft Message Queuing Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02039 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-125

TI-2024-14077 CVE-2024-21316 · GHSA-66j8-27jm-c7ff

Windows Server Key Distribution Service Security Feature Bypass

LOW 32

Windows Server Key Distribution Service Security Feature Bypass

CVSS 3.1MEDIUM 6.1 Network High privileges User interaction EPSS 0.01475 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +7 CWE-20

TI-2024-13503 CVE-2024-20692 · GHSA-mw57-gv8v-cj4r

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

LOW 28

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.01183 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-326

TI-2024-14074 CVE-2024-21313 · GHSA-9p7x-rvcj-9wg6

Windows TCP/IP Information Disclosure Vulnerability

LOW 27

Windows TCP/IP Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.01499 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-209

TI-2024-13505 CVE-2024-20694 · GHSA-jcxm-cfv5-gp8j

Windows CoreMessaging Information Disclosure Vulnerability

LOW 27

Windows CoreMessaging Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00887 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +7 CWE-908

TI-2024-14072 CVE-2024-21311 · GHSA-7rrh-5xjg-2jmp

Windows Cryptographic Services Information Disclosure Vulnerability

LOW 26

Windows Cryptographic Services Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00783 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-125

TI-2024-13510 CVE-2024-20699 · GHSA-6gw8-36pw-g34w

Windows Hyper-V Denial of Service Vulnerability

LOW 26

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00739 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-755

TI-2024-13474 CVE-2024-20662 · GHSA-5x77-x3qm-5v2f

Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability

LOW 26

Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01921 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-843

TI-2024-14066 CVE-2024-21305 · GHSA-pc6v-rjpx-v6rm

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

LOW 23

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.01494 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-732

TI-2024-13502 CVE-2024-20691 · GHSA-rhpx-9698-w5hr

Windows Themes Information Disclosure Vulnerability

LOW 22

Windows Themes Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00587 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +11 CWE-125