Microsoft update

KB5037768

Security Update

View on Microsoft →

Fixed in

Windows 10 Version 21H2 for 32-bit Systems 10.0.19044.4412
Windows 10 Version 21H2 for ARM64-based Systems 10.0.19044.4412
Windows 10 Version 21H2 for x64-based Systems 10.0.19044.4412
Windows 10 Version 22H2 for 32-bit Systems 10.0.19045.4412
Windows 10 Version 22H2 for ARM64-based Systems 10.0.19045.4412
Windows 10 Version 22H2 for x64-based Systems 10.0.19045.4412

Fixes 47 records

TI-2024-19802 CVE-2024-30040 · GHSA-mmh4-cvwv-5vmm

Windows MSHTML Platform Security Feature Bypass Vulnerability

CRITICAL 97KEV

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03939 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +8 CWE-20

TI-2024-19813 CVE-2024-30051 · GHSA-rq9g-8pvx-hrqx

Windows DWM Core Library Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows DWM Core Library Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.05687 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +7 CWE-122

TI-2024-19780 CVE-2024-30017 · GHSA-48g2-452q-4xqc

Windows Hyper-V Remote Code Execution Vulnerability

MEDIUM 44

Windows Hyper-V Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01912 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +8 CWE-122

TI-2024-19794 CVE-2024-30032 · GHSA-c43w-gr2q-7prv

Windows DWM Core Library Elevation of Privilege Vulnerability

MEDIUM 43

Windows DWM Core Library Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04524 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +8 CWE-416

TI-2024-19788 CVE-2024-30025 · GHSA-qgcj-39gh-rqf4

Windows Common Log File System Driver Elevation of Privilege Vulnerability

MEDIUM 43

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04277 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-125

TI-2024-19772 CVE-2024-30009 · GHSA-rg8v-554v-gv5q

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01715 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-197

TI-2024-19769 CVE-2024-30006 · GHSA-2pcw-j73g-x4xv

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01715 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-416

TI-2024-17299 CVE-2024-26211 · GHSA-5p2g-jj66-wf2m

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

MEDIUM 43

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04119 Published 2024-04-09 Fixed in 10.0.17763.5820, 10.0.20348.2461 +9 CWE-122

TI-2024-19797 CVE-2024-30035 · GHSA-fjfj-c994-xhg8

Windows DWM Core Library Elevation of Privilege Vulnerability

MEDIUM 42

Windows DWM Core Library Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03544 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +6 CWE-416

TI-2024-19759 CVE-2024-29996 · GHSA-p7wr-w92h-qvhj

Windows Common Log File System Driver Elevation of Privilege Vulnerability

MEDIUM 42

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0335 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-125

TI-2024-19800 CVE-2024-30038 · GHSA-57hv-hvrf-mc7w

Win32k Elevation of Privilege Vulnerability

MEDIUM 41

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02551 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +10 CWE-122

TI-2024-19783 CVE-2024-30020 · GHSA-mhcv-2f7w-4c7r

Windows Cryptographic Services Remote Code Execution Vulnerability

MEDIUM 40

Windows Cryptographic Services Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01303 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-122

TI-2024-19812 CVE-2024-30050 · GHSA-xf94-mpvp-r8x2

Windows Mark of the Web Security Feature Bypass Vulnerability

LOW 38

Windows Mark of the Web Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.11471 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-693

TI-2024-19791 CVE-2024-30029 · GHSA-qc29-c5fh-cmcf

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

LOW 38

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01489 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-197

TI-2024-19787 CVE-2024-30024 · GHSA-mqmg-rcjr-35hf

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

LOW 38

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01543 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-197

TI-2024-19786 CVE-2024-30023 · GHSA-f8q3-43c9-8534

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

LOW 38

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01543 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-197

TI-2024-19785 CVE-2024-30022 · GHSA-x7f5-8755-9m9j

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

LOW 38

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01543 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-197

TI-2024-19781 CVE-2024-30018 · GHSA-4hjw-gj2g-h3cx

Windows Kernel Elevation of Privilege Vulnerability

LOW 38

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00883 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +6 CWE-59

TI-2024-19778 CVE-2024-30015 · GHSA-8g76-cc7j-4rcm

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

LOW 38

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01489 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-197

TI-2024-19777 CVE-2024-30014 · GHSA-c2m9-m7gx-6446

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

LOW 38

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01489 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-197

TI-2024-17325 CVE-2024-26238 · GHSA-5977-vhpg-p3hq

Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability

LOW 38

Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00818 Published 2024-05-14 Fixed in 10.0.19044.4412, 10.0.19045.4412 CWE-59

TI-2024-19811 CVE-2024-30049 · GHSA-7xh6-q259-9vj8

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

LOW 37

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00713 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-416

TI-2024-19790 CVE-2024-30028 · GHSA-5rw7-vr47-cwq3

Win32k Elevation of Privilege Vulnerability

LOW 37

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00711 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-416

TI-2024-19789 CVE-2024-30027 · GHSA-92g8-76j6-h38q

NTFS Elevation of Privilege Vulnerability

LOW 37

NTFS Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00637 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-415

TI-2024-19757 CVE-2024-29994 · GHSA-995f-rv3r-c9mx

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

LOW 37

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00674 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +6 CWE-125

TI-2024-19793 CVE-2024-30031 · GHSA-qj72-6765-vjx4

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

LOW 36

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00399 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-416

TI-2024-19799 CVE-2024-30037 · GHSA-c538-wc3x-p8rv

Windows Common Log File System Driver Elevation of Privilege Vulnerability

LOW 35

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.05275 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-125

TI-2024-19796 CVE-2024-30034 · GHSA-3pvf-92c7-q7p5

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

LOW 35

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0688 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +6 CWE-843

TI-2024-19784 CVE-2024-30021 · GHSA-wjpx-8jpr-39fm

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

LOW 34

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00834 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +6 CWE-190

TI-2024-19767 CVE-2024-30004 · GHSA-vf32-jfm3-g5gw

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

LOW 34

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00894 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +6 CWE-190

TI-2024-19764 CVE-2024-30001 · GHSA-7pfj-8mjx-32jj

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

LOW 34

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00932 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +6 CWE-190

TI-2024-19763 CVE-2024-30000 · GHSA-6gwx-p5v3-gp7v

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

LOW 34

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00932 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +6 CWE-190

TI-2024-19762 CVE-2024-29999 · GHSA-hvgq-r5vj-4694

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

LOW 34

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00932 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +6 CWE-190

TI-2024-19761 CVE-2024-29998 · GHSA-cpx8-w86q-v7v5

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

LOW 34

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00932 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +6 CWE-20

TI-2024-19760 CVE-2024-29997 · GHSA-8w5m-p675-52gw

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

LOW 34

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00932 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +6 CWE-190

TI-2024-19795 CVE-2024-30033 · GHSA-3rfp-rjr4-9hh9

Windows Search Service Elevation of Privilege Vulnerability

LOW 33

Windows Search Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00956 Published 2024-05-14 Fixed in 10.0.20348.2461, 10.0.22000.2960 +2 CWE-59

TI-2024-19775 CVE-2024-30012 · GHSA-fxpr-9fmx-9mgx

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

LOW 32

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00868 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +6 CWE-190

TI-2024-19768 CVE-2024-30005 · GHSA-282m-667p-q2wq

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

LOW 32

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00932 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +6 CWE-190

TI-2024-19766 CVE-2024-30003 · GHSA-ppw7-87m8-4pj8

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

LOW 32

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00932 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +6 CWE-190

TI-2024-19765 CVE-2024-30002 · GHSA-g2f2-8j4v-v2mr

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

LOW 32

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00932 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +6 CWE-20

TI-2024-19801 CVE-2024-30039 · GHSA-5qp4-g8f2-222m

Windows Remote Access Connection Manager Information Disclosure Vulnerability

LOW 26

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00738 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-126

TI-2024-19779 CVE-2024-30016 · GHSA-929x-9pm6-c6cr

Windows Cryptographic Services Information Disclosure Vulnerability

LOW 26

Windows Cryptographic Services Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00792 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +12 CWE-125

TI-2024-19771 CVE-2024-30008 · GHSA-rj65-h7q6-63qc

Windows DWM Core Library Information Disclosure Vulnerability

LOW 26

Windows DWM Core Library Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00793 Published 2024-05-14 Fixed in 10.0.17763.5820, 10.0.20348.2461 +8 CWE-191

TI-2024-19097 CVE-2024-28902 · GHSA-8g89-49x9-pqr8

Windows Remote Access Connection Manager Information Disclosure Vulnerability

LOW 26

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00755 Published 2024-04-09 Fixed in 10.0.17763.5820, 10.0.20348.2461 +9 CWE-126

TI-2024-19095 CVE-2024-28900 · GHSA-cw34-gw9h-rxc6

Windows Remote Access Connection Manager Information Disclosure Vulnerability

LOW 26

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00674 Published 2024-04-09 Fixed in 10.0.17763.5820, 10.0.20348.2461 +9 CWE-126

TI-2024-17305 CVE-2024-26217 · GHSA-x767-6775-vv77

Windows Remote Access Connection Manager Information Disclosure Vulnerability

LOW 26

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00692 Published 2024-04-09 Fixed in 10.0.17763.5820, 10.0.20348.2461 +9 CWE-125

TI-2024-17295 CVE-2024-26207 · GHSA-q6v4-gg2w-f97v

Windows Remote Access Connection Manager Information Disclosure Vulnerability

LOW 26

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00755 Published 2024-04-09 Fixed in 10.0.17763.5820, 10.0.20348.2461 +9 CWE-125