Microsoft update

KB5035856

Security Update

View on Microsoft →

Fixed in

Windows Server 2022, 23H2 Edition (Server Core installation) 10.0.25398.763

Fixes 35 records

TI-2024-17259 CVE-2024-26169 · GHSA-v6c8-v4w6-r8wx

Windows Error Reporting Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04014 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +9 CWE-269

TI-2024-14189 CVE-2024-21430 · GHSA-rf8x-xcjr-27mf

Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability

MEDIUM 64

Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.4 Physical No auth No interaction EPSS 0.00705 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +10 CWE-125

TI-2024-14167 CVE-2024-21407 · GHSA-hgr2-6x66-c9q4

Windows Hyper-V Remote Code Execution Vulnerability

MEDIUM 52

Windows Hyper-V Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.16256 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +10 CWE-416

TI-2024-14196 CVE-2024-21437 · GHSA-c475-923p-gg3c

Windows Graphics Component Elevation of Privilege Vulnerability

MEDIUM 47

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.08031 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-416

TI-2024-17260 CVE-2024-26170 · GHSA-xpwc-q7w4-49mq

Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

MEDIUM 46

Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.06647 Published 2024-03-12 Fixed in 10.0.20348.2340, 10.0.22000.2836 +5 CWE-20

TI-2024-17279 CVE-2024-26190

Microsoft QUIC Denial of Service Vulnerability

MEDIUM 44

Microsoft QUIC Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0299 Published 2024-03-12 Fixed in 17.9.3, 10.0.20348.2340 +11 CWE-400

TI-2024-17256 CVE-2024-26166 · GHSA-r2gp-p8p8-5p94

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02026 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-122

TI-2024-17251 CVE-2024-26161 · GHSA-ch65-8fj7-6r6x

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01947 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-122

TI-2024-17249 CVE-2024-26159 · GHSA-p97j-639r-983f

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 44

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01947 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-122

TI-2024-14210 CVE-2024-21451 · GHSA-w89m-878p-5xvm

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 44

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01947 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-197

TI-2024-14209 CVE-2024-21450 · GHSA-g73g-2j83-vx95

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02026 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-190

TI-2024-14203 CVE-2024-21444 · GHSA-hmfc-6f4p-c8qr

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01947 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-190

TI-2024-14200 CVE-2024-21441 · GHSA-vp29-fgg5-m92h

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01947 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-190

TI-2024-14199 CVE-2024-21440 · GHSA-gp9p-gmpv-m4v5

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 44

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02026 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-197

TI-2024-14197 CVE-2024-21438 · GHSA-g7j3-wqpv-m97m

Microsoft AllJoyn API Denial of Service Vulnerability

MEDIUM 44

Microsoft AllJoyn API Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02718 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +8 CWE-369

TI-2024-17252 CVE-2024-26162 · GHSA-7mgr-jpp8-wjg4

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 42

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02024 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-681

TI-2024-14192 CVE-2024-21433 · GHSA-wgrh-qrr7-qq96

Windows Print Spooler Elevation of Privilege Vulnerability

MEDIUM 41

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.05138 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +10 CWE-367

TI-2024-17268 CVE-2024-26178 · GHSA-fqjf-425c-q55w

Windows Kernel Elevation of Privilege Vulnerability

LOW 38

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00894 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-122

TI-2024-17263 CVE-2024-26173 · GHSA-3427-99jp-r4g2

Windows Kernel Elevation of Privilege Vulnerability

LOW 38

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00894 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-20

TI-2024-17250 CVE-2024-26160 · GHSA-x4qx-c389-cj23

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

LOW 38

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.11368 Published 2024-03-12 Fixed in 10.0.22621.3296, 10.0.22631.3296 +1 CWE-126

TI-2024-14193 CVE-2024-21434 · GHSA-6wcv-g2h3-2m7q

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

LOW 38

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00825 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +6 CWE-197

TI-2024-14205 CVE-2024-21446 · GHSA-4wx6-4vp5-v97f

NTFS Elevation of Privilege Vulnerability

LOW 37

NTFS Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00663 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-591

TI-2024-14202 CVE-2024-21443 · GHSA-j35v-jw9h-2h3w

Windows Kernel Elevation of Privilege Vulnerability

LOW 37

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.01286 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +6 CWE-416

TI-2024-14195 CVE-2024-21436 · GHSA-x8qq-3pvh-3pjr

Windows Installer Elevation of Privilege Vulnerability

LOW 37

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00721 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-284

TI-2024-17266 CVE-2024-26176 · GHSA-w576-x7c8-w498

Windows Kernel Elevation of Privilege Vulnerability

LOW 36

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00826 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-126

TI-2024-14201 CVE-2024-21442 · GHSA-x5p5-w4hp-mprx

Windows USB Print Driver Elevation of Privilege Vulnerability

LOW 36

Windows USB Print Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00825 Published 2024-03-12 Fixed in 10.0.20348.2340, 10.0.22000.2836 +5 CWE-170

TI-2024-14190 CVE-2024-21431 · GHSA-94h3-qpxm-r2mp

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

LOW 35

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00637 Published 2024-03-12 Fixed in 10.0.20348.2340, 10.0.22000.2836 +5 CWE-732

TI-2024-14204 CVE-2024-21445 · GHSA-x2qr-244g-56q9

Windows USB Print Driver Elevation of Privilege Vulnerability

LOW 34

Windows USB Print Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00541 Published 2024-03-12 Fixed in 10.0.20348.2340, 10.0.22000.2836 +5 CWE-415

TI-2024-14191 CVE-2024-21432 · GHSA-548g-pcc5-4492

Windows Update Stack Elevation of Privilege Vulnerability

LOW 34

Windows Update Stack Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00689 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +10 CWE-59

TI-2024-14188 CVE-2024-21429 · GHSA-gv6r-gxx4-rhjw

Windows USB Hub Driver Remote Code Execution Vulnerability

LOW 34

Windows USB Hub Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00904 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-197

TI-2024-14198 CVE-2024-21439 · GHSA-m74x-wfqr-f768

Windows Telephony Server Elevation of Privilege Vulnerability

LOW 33

Windows Telephony Server Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0052 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-416

TI-2024-14168 CVE-2024-21408 · GHSA-6f5r-w59m-9jm4

Windows Hyper-V Denial of Service Vulnerability

LOW 32

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.04507 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +8 CWE-835

TI-2024-17271 CVE-2024-26181 · GHSA-h3fv-rwfq-5hgg

Windows Kernel Denial of Service Vulnerability

LOW 27

Windows Kernel Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01035 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-20

TI-2024-17267 CVE-2024-26177 · GHSA-q58f-q64h-6p4f

Windows Kernel Information Disclosure Vulnerability

LOW 27

Windows Kernel Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0112 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-200

TI-2024-17264 CVE-2024-26174 · GHSA-hpq4-fc7m-px2f

Windows Kernel Information Disclosure Vulnerability

LOW 27

Windows Kernel Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0092 Published 2024-03-12 Fixed in 10.0.17763.5576, 10.0.20348.2340 +12 CWE-125