Microsoft update

KB5034171

Monthly Rollup

View on Microsoft →

Fixed in

Windows Server 2012 R2 6.3.9600.21765
Windows Server 2012 R2 (Server Core installation) 6.3.9600.21765

Fixes 22 records

TI-2024-13485 CVE-2024-20674 · GHSA-37gw-25xx-74f7

Windows Kerberos Security Feature Bypass Vulnerability

MEDIUM 57

Windows Kerberos Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.17168 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-305

TI-2024-14081 CVE-2024-21320 · GHSA-fvh6-48v9-mqh2

Windows Themes Spoofing Vulnerability

MEDIUM 49

Windows Themes Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.226 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +9 CWE-200

TI-2024-13473 CVE-2024-20661 · GHSA-62fm-r774-57v7

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 44

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02759 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-476

TI-2024-13494 CVE-2024-20683 · GHSA-rrrh-8rp4-pgc2

Win32k Elevation of Privilege Vulnerability

MEDIUM 43

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04207 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-416

TI-2024-13466 CVE-2024-20654 · GHSA-9w5p-cfp8-w353

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 41

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.0199 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-190

TI-2024-13465 CVE-2024-20653 · GHSA-m9vg-87mr-c2rx

Microsoft Common Log File System Elevation of Privilege Vulnerability

MEDIUM 41

Microsoft Common Log File System Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04493 Published 2024-01-09 Fixed in 10.0.25398.643, 10.0.22631.3007 +12 CWE-125

TI-2024-13464 CVE-2024-20652 · GHSA-6j79-xv7w-8g6f

Windows HTML Platforms Security Feature Bypass Vulnerability

MEDIUM 41

Windows HTML Platforms Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02084 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +11 CWE-73

TI-2024-14068 CVE-2024-21307 · GHSA-fv65-2c76-4jh9

Remote Desktop Client Remote Code Execution Vulnerability

LOW 39

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01963 Published 2024-01-09 Fixed in 10.0.17763.5329, 1.2.5105.0 +11 CWE-416

TI-2024-13493 CVE-2024-20682 · GHSA-hqxc-wrhh-3x6q

Windows Cryptographic Services Remote Code Execution Vulnerability

LOW 37

Windows Cryptographic Services Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00757 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +10 CWE-822

TI-2024-13470 CVE-2024-20658 · GHSA-x5cx-qfrc-rw4r

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

LOW 37

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00706 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +10 CWE-125

TI-2024-13469 CVE-2024-20657 · GHSA-fpg3-7wj3-x58x

Windows Group Policy Elevation of Privilege Vulnerability

LOW 34

Windows Group Policy Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00569 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-284

TI-2024-13467 CVE-2024-20655 · GHSA-c2cf-p6qq-wxrr

Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability

LOW 34

Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.01408 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-416

TI-2024-14075 CVE-2024-21314 · GHSA-8g6x-mrx6-77x2

Microsoft Message Queuing Information Disclosure Vulnerability

LOW 33

Microsoft Message Queuing Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02078 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-125

TI-2024-13491 CVE-2024-20680 · GHSA-85h2-c2jq-7mg4

Windows Message Queuing Client (MSMQC) Information Disclosure

LOW 33

Windows Message Queuing Client (MSMQC) Information Disclosure

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02039 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-822

TI-2024-13476 CVE-2024-20664 · GHSA-jh2h-9mjq-3gvm

Microsoft Message Queuing Information Disclosure Vulnerability

LOW 33

Microsoft Message Queuing Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01997 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-822

TI-2024-13475 CVE-2024-20663 · GHSA-jf4q-23f7-4mp3

Windows Message Queuing Client (MSMQC) Information Disclosure

LOW 33

Windows Message Queuing Client (MSMQC) Information Disclosure

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01925 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-822

TI-2024-13472 CVE-2024-20660 · GHSA-qpjw-c5c3-h83r

Microsoft Message Queuing Information Disclosure Vulnerability

LOW 33

Microsoft Message Queuing Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02039 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-125

TI-2024-13503 CVE-2024-20692 · GHSA-mw57-gv8v-cj4r

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

LOW 28

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.01183 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-326

TI-2024-14074 CVE-2024-21313 · GHSA-9p7x-rvcj-9wg6

Windows TCP/IP Information Disclosure Vulnerability

LOW 27

Windows TCP/IP Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.01499 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-209

TI-2024-14072 CVE-2024-21311 · GHSA-7rrh-5xjg-2jmp

Windows Cryptographic Services Information Disclosure Vulnerability

LOW 26

Windows Cryptographic Services Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00783 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +12 CWE-125

TI-2024-13474 CVE-2024-20662 · GHSA-5x77-x3qm-5v2f

Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability

LOW 26

Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01921 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +6 CWE-843

TI-2024-13502 CVE-2024-20691 · GHSA-rhpx-9698-w5hr

Windows Themes Information Disclosure Vulnerability

LOW 22

Windows Themes Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00587 Published 2024-01-09 Fixed in 10.0.17763.5329, 10.0.20348.2227 +11 CWE-125