Microsoft update

KB5034769

Security Update

View on Microsoft →

Fixed in

Windows Server 2022, 23H2 Edition (Server Core installation) 10.0.25398.709

Fixes 42 records

TI-2024-14172 CVE-2024-21412 · GHSA-2mmw-g99r-5x3v

Internet Shortcut Files Security Feature Bypass Vulnerability

CRITICAL 94KEV

Internet Shortcut Files Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.9941 Published 2024-02-13 Fixed in 10.0.17763.5458, 10.0.19044.4046 +6 CWE-693

TI-2024-14098 CVE-2024-21338 · GHSA-jqrq-gqwg-r8r5

Windows Kernel Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.5981 Published 2024-02-13 Fixed in 10.0.17763.5458, 10.0.19044.4046 +6 CWE-822

TI-2024-14117 CVE-2024-21357 · GHSA-7j2m-h9v4-jfx3

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

MEDIUM 59

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.26899 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-843

TI-2024-14105 CVE-2024-21345 · GHSA-2crq-h5c4-gg2p

Windows Kernel Elevation of Privilege Vulnerability

MEDIUM 59

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.20237 Published 2024-02-13 Fixed in 10.0.25398.709 CWE-122

TI-2024-14131 CVE-2024-21371 · GHSA-5g3c-xpc6-569g

Windows Kernel Elevation of Privilege Vulnerability

MEDIUM 46

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.10884 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +10 CWE-367

TI-2024-14180 CVE-2024-21420 · GHSA-656r-f454-6wgf

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0173 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-190

TI-2024-14132 CVE-2024-21372 · GHSA-gcw7-pj2v-4p7m

Windows OLE Remote Code Execution Vulnerability

MEDIUM 44

Windows OLE Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01806 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-190

TI-2024-14130 CVE-2024-21370 · GHSA-7x7v-w2rw-mcq4

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01768 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14126 CVE-2024-21366 · GHSA-778x-f39r-xr3j

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01768 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14125 CVE-2024-21365 · GHSA-wg47-w2rm-c8gx

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01768 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14120 CVE-2024-21360 · GHSA-cqc3-wp4c-vrcw

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01768 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14118 CVE-2024-21358 · GHSA-5274-vpj4-w5jf

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01768 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14102 CVE-2024-21342 · GHSA-95rw-m3jj-r8jm

Windows DNS Client Denial of Service Vulnerability

MEDIUM 44

Windows DNS Client Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02535 Published 2024-02-13 Fixed in 10.0.22621.3155, 10.0.22631.3155 +1 CWE-400

TI-2024-14151 CVE-2024-21391 · GHSA-fpcm-3c3x-8cpj

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01628 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-197

TI-2024-14135 CVE-2024-21375 · GHSA-c3f4-9jqh-m7h6

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01652 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-416

TI-2024-14129 CVE-2024-21369 · GHSA-7ggc-w2g9-j9rm

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01549 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14128 CVE-2024-21368 · GHSA-fvwf-g95f-ccmf

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01644 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14127 CVE-2024-21367 · GHSA-h5xg-83p6-j59j

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01644 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14121 CVE-2024-21361 · GHSA-vr63-2xjh-w46r

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01644 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14119 CVE-2024-21359 · GHSA-q4pm-3jvq-rm3m

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01644 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14113 CVE-2024-21353 · GHSA-6x2q-4wwr-j5p2

Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01575 Published 2024-02-13 Fixed in 10.0.25398.709 CWE-122

TI-2024-14112 CVE-2024-21352 · GHSA-8v72-m9q9-xpwf

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01628 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-197

TI-2024-14110 CVE-2024-21350 · GHSA-f36v-g487-9gfr

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01484 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-190

TI-2024-14109 CVE-2024-21349 · GHSA-w457-v52w-2vrw

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

MEDIUM 43

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01644 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14108 CVE-2024-21348 · GHSA-8pmf-5vv3-gw7f

Internet Connection Sharing (ICS) Denial of Service Vulnerability

MEDIUM 43

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02176 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +10 CWE-122

TI-2024-14106 CVE-2024-21346 · GHSA-fx4r-wq66-f4g2

Win32k Elevation of Privilege Vulnerability

MEDIUM 43

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0412 Published 2024-02-13 Fixed in 10.0.22000.2777, 10.0.22621.3155 +2 CWE-822

TI-2024-14166 CVE-2024-21406 · GHSA-jm96-wx9p-8wm4

Windows Printing Service Spoofing Vulnerability

MEDIUM 40

Windows Printing Service Spoofing Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00856 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +11 CWE-319

TI-2024-14107 CVE-2024-21347 · GHSA-mm8h-v6fv-cf89

Microsoft ODBC Driver Remote Code Execution Vulnerability

LOW 38

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01372 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14123 CVE-2024-21363 · GHSA-99h4-3x4g-cr3g

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 37

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00801 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-843

TI-2024-14114 CVE-2024-21354 · GHSA-3x8m-mcw2-vhx7

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

LOW 37

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00614 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14103 CVE-2024-21343 · GHSA-2hmc-fq7v-3hqv

Windows Network Address Translation (NAT) Denial of Service Vulnerability

LOW 37

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01842 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +9 CWE-125

TI-2024-14101 CVE-2024-21341 · GHSA-m8j5-w72j-565q

Windows Kernel Remote Code Execution Vulnerability

LOW 34

Windows Kernel Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00952 Published 2024-02-13 Fixed in 10.0.17763.5458, 10.0.19044.4046 +6 CWE-122

TI-2024-14165 CVE-2024-21405 · GHSA-9mw3-pvx5-q297

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

LOW 33

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00384 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-591

TI-2024-14116 CVE-2024-21356 · GHSA-v22x-x62x-q5qj

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

LOW 33

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02079 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-476

TI-2024-14115 CVE-2024-21355 · GHSA-99xv-j5qx-85qp

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

LOW 33

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00322 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-591

TI-2024-14099 CVE-2024-21339 · GHSA-qc5h-6jxv-459g

Windows USB Generic Parent Driver Remote Code Execution Vulnerability

LOW 31

Windows USB Generic Parent Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.4 Physical No auth No interaction EPSS 0.00551 Published 2024-02-13 Fixed in 10.0.17763.5458, 10.0.19044.4046 +6 CWE-416

TI-2024-13495 CVE-2024-20684 · GHSA-gg34-hfvm-v359

Windows Hyper-V Denial of Service Vulnerability

LOW 31

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.0103 Published 2024-02-13 Fixed in 10.0.22000.2777, 10.0.22621.3155 +3 CWE-20

TI-2024-14104 CVE-2024-21344 · GHSA-37rh-9c3h-22jm

Windows Network Address Translation (NAT) Denial of Service Vulnerability

LOW 30

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01691 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +9 CWE-125

TI-2024-14122 CVE-2024-21362 · GHSA-82hw-q3r9-q2hc

Windows Kernel Security Feature Bypass Vulnerability

LOW 27

Windows Kernel Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00423 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +8 CWE-367

TI-2024-14137 CVE-2024-21377 · GHSA-h3h7-g394-rv9x

Windows DNS Information Disclosure Vulnerability

LOW 26

Windows DNS Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00649 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +9 CWE-197

TI-2024-14100 CVE-2024-21340 · GHSA-h5mw-2rhw-phqc

Windows Kernel Information Disclosure Vulnerability

LOW 23

Windows Kernel Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00752 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-126

TI-2024-14065 CVE-2024-21304 · GHSA-9qcp-fr5g-q6j7

Trusted Compute Base Elevation of Privilege Vulnerability

LOW 20

Trusted Compute Base Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 4.1 Local High privileges No interaction EPSS 0.00482 Published 2024-02-13 Fixed in 10.0.17763.5458, 10.0.19044.4046 +6 CWE-20