Microsoft update

KB5034830

Monthly Rollup

View on Microsoft →

Fixed in

Microsoft Defender for Endpoint for Windows 6.2.9200.24710
Windows Server 2012 6.2.9200.24710
Windows Server 2012 (Server Core installation) 6.2.9200.24710

Fixes 29 records

TI-2024-14117 CVE-2024-21357 · GHSA-7j2m-h9v4-jfx3

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

MEDIUM 59

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.26899 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-843

TI-2024-14131 CVE-2024-21371 · GHSA-5g3c-xpc6-569g

Windows Kernel Elevation of Privilege Vulnerability

MEDIUM 46

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.10884 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +10 CWE-367

TI-2024-14180 CVE-2024-21420 · GHSA-656r-f454-6wgf

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0173 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-190

TI-2024-14132 CVE-2024-21372 · GHSA-gcw7-pj2v-4p7m

Windows OLE Remote Code Execution Vulnerability

MEDIUM 44

Windows OLE Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01806 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-190

TI-2024-14130 CVE-2024-21370 · GHSA-7x7v-w2rw-mcq4

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01768 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14126 CVE-2024-21366 · GHSA-778x-f39r-xr3j

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01768 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14125 CVE-2024-21365 · GHSA-wg47-w2rm-c8gx

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01768 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14120 CVE-2024-21360 · GHSA-cqc3-wp4c-vrcw

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01768 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14118 CVE-2024-21358 · GHSA-5274-vpj4-w5jf

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01768 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14151 CVE-2024-21391 · GHSA-fpcm-3c3x-8cpj

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01628 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-197

TI-2024-14135 CVE-2024-21375 · GHSA-c3f4-9jqh-m7h6

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01652 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-416

TI-2024-14129 CVE-2024-21369 · GHSA-7ggc-w2g9-j9rm

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01549 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14128 CVE-2024-21368 · GHSA-fvwf-g95f-ccmf

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01644 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14127 CVE-2024-21367 · GHSA-h5xg-83p6-j59j

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01644 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14121 CVE-2024-21361 · GHSA-vr63-2xjh-w46r

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01644 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14119 CVE-2024-21359 · GHSA-q4pm-3jvq-rm3m

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01644 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14112 CVE-2024-21352 · GHSA-8v72-m9q9-xpwf

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01628 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-197

TI-2024-14110 CVE-2024-21350 · GHSA-f36v-g487-9gfr

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01484 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-190

TI-2024-14109 CVE-2024-21349 · GHSA-w457-v52w-2vrw

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

MEDIUM 43

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01644 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14108 CVE-2024-21348 · GHSA-8pmf-5vv3-gw7f

Internet Connection Sharing (ICS) Denial of Service Vulnerability

MEDIUM 43

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02176 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +10 CWE-122

TI-2024-14166 CVE-2024-21406 · GHSA-jm96-wx9p-8wm4

Windows Printing Service Spoofing Vulnerability

MEDIUM 40

Windows Printing Service Spoofing Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00856 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +11 CWE-319

TI-2024-14107 CVE-2024-21347 · GHSA-mm8h-v6fv-cf89

Microsoft ODBC Driver Remote Code Execution Vulnerability

LOW 38

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01372 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14123 CVE-2024-21363 · GHSA-99h4-3x4g-cr3g

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 37

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00801 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-843

TI-2024-14114 CVE-2024-21354 · GHSA-3x8m-mcw2-vhx7

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

LOW 37

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00614 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-122

TI-2024-14076 CVE-2024-21315 · GHSA-j7vw-8r54-mfcg

Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability

LOW 37

Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00639 Published 2024-02-13 Fixed in 10.0.17763.5122 CWE-20

TI-2024-14165 CVE-2024-21405 · GHSA-9mw3-pvx5-q297

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

LOW 33

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00384 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-591

TI-2024-14116 CVE-2024-21356 · GHSA-v22x-x62x-q5qj

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

LOW 33

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02079 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-476

TI-2024-14115 CVE-2024-21355 · GHSA-99xv-j5qx-85qp

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

LOW 33

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00322 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-591

TI-2024-14100 CVE-2024-21340 · GHSA-h5mw-2rhw-phqc

Windows Kernel Information Disclosure Vulnerability

LOW 23

Windows Kernel Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00752 Published 2024-02-13 Fixed in 10.0.10240.20469, 10.0.14393.6709 +12 CWE-126