Microsoft update

KB5040490

Security Only

View on Microsoft →

Fixed in

Windows Server 2008 for 32-bit Systems Service Pack 2 6.0.6003.22769
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 6.0.6003.22769
Windows Server 2008 for x64-based Systems Service Pack 2 6.0.6003.22769
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 6.0.6003.22769

Fixes 30 records

TI-2024-25397 CVE-2024-38112 · GHSA-43wv-w8q4-mcvr

Windows MSHTML Platform Spoofing Vulnerability

CRITICAL 92KEV

Windows MSHTML Platform Spoofing Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.84225 Published 2024-07-09 Fixed in 10.0.19045.4651, 10.0.22631.3880 +10 CWE-451

TI-2024-25366 CVE-2024-38077 · GHSA-9j79-xcx5-mxm4

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CRITICAL 90

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.84232 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +6 CWE-122

TI-2024-25361 CVE-2024-38071 · GHSA-3g26-4vjw-j4m6

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

HIGH 65

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.35854 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +6 CWE-126

TI-2024-25310 CVE-2024-38017 · GHSA-x75f-qc9p-25hq

Microsoft Message Queuing Information Disclosure Vulnerability

MEDIUM 58

Microsoft Message Queuing Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00925 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-200

TI-2024-19843 CVE-2024-30081 · GHSA-qmw8-f3p7-jc9f

Windows NTLM Spoofing Vulnerability

MEDIUM 54

Windows NTLM Spoofing Vulnerability

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.23807 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-200

TI-2024-25344 CVE-2024-38054 · GHSA-hqpw-f5hx-r963

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

MEDIUM 49

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.10419 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-122

TI-2024-25342 CVE-2024-38052 · GHSA-4jmv-3f44-7558

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

MEDIUM 46

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.06972 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-20

TI-2024-25391 CVE-2024-38104 · GHSA-j75r-7p56-j76j

Windows Fax Service Remote Code Execution Vulnerability

MEDIUM 44

Windows Fax Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01823 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-822

TI-2024-25374 CVE-2024-38085 · GHSA-2956-gj54-r9fg

Windows Graphics Component Elevation of Privilege Vulnerability

MEDIUM 44

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.05255 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-416

TI-2024-25363 CVE-2024-38073 · GHSA-6vgm-7j8g-rvjw

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

MEDIUM 44

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0248 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +6 CWE-125

TI-2024-25358 CVE-2024-38068 · GHSA-qvwr-cjpf-5r7r

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

MEDIUM 44

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02518 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-400

TI-2024-25357 CVE-2024-38067 · GHSA-x94c-jr4g-ffpm

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

MEDIUM 44

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02518 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +6 CWE-400

TI-2024-25323 CVE-2024-38031 · GHSA-v65m-fc48-54hw

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

MEDIUM 44

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02518 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +6 CWE-400

TI-2024-25354 CVE-2024-38064 · GHSA-f9w4-3ph5-pvx4

Windows TCP/IP Information Disclosure Vulnerability

MEDIUM 43

Windows TCP/IP Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02195 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-908

TI-2024-25339 CVE-2024-38049 · GHSA-g3mv-cm79-hcfr

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability

MEDIUM 40

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01554 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-73

TI-2024-25356 CVE-2024-38066 · GHSA-68qh-2g63-j8vg

Windows Win32k Elevation of Privilege Vulnerability

LOW 38

Windows Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00859 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.19044.4651 +7 CWE-416

TI-2024-25341 CVE-2024-38051 · GHSA-vvhw-w8wg-x5wc

Windows Graphics Component Remote Code Execution Vulnerability

LOW 38

Windows Graphics Component Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01121 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-122

TI-2024-25334 CVE-2024-38044 · GHSA-v3vx-gxfc-r83r

DHCP Server Service Remote Code Execution Vulnerability

LOW 38

DHCP Server Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02125 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +6 CWE-197

TI-2024-25320 CVE-2024-38028 · GHSA-x48j-rv4g-x2hh

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

LOW 38

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0207 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-125

TI-2024-25318 CVE-2024-38025 · GHSA-6rp9-rg2h-r235

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

LOW 38

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0207 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-122

TI-2024-25473 CVE-2024-38191 · GHSA-m89q-7gq5-hqp7

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

LOW 37

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00511 Published 2024-08-13 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-362

TI-2024-25379 CVE-2024-38091 · GHSA-3wqw-8x5p-vv88

Microsoft WS-Discovery Denial of Service Vulnerability

LOW 37

Microsoft WS-Discovery Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01889 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-166

TI-2024-25368 CVE-2024-38079 · GHSA-j4ff-2v8v-prrg

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 37

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00709 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-122

TI-2024-25347 CVE-2024-38057 · GHSA-68xx-3mrv-x3mm

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

LOW 37

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00756 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-125

TI-2024-25312 CVE-2024-38019 · GHSA-f68x-wvvp-cj43

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

LOW 37

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01781 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-190

TI-2024-25338 CVE-2024-38048 · GHSA-7g8f-wmjh-9m7x

Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability

LOW 31

Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01008 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-125

TI-2024-25319 CVE-2024-38027 · GHSA-j8wg-8fgf-x8c5

Windows Line Printer Daemon Service Denial of Service Vulnerability

LOW 31

Windows Line Printer Daemon Service Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01008 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-400

TI-2024-25386 CVE-2024-38099 · GHSA-mc7j-m4q9-fwj9

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

LOW 29

Windows Remote Desktop Licensing Service Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0128 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +5 CWE-287

TI-2024-25345 CVE-2024-38055 · GHSA-m922-f8rr-h58j

Microsoft Windows Codecs Library Information Disclosure Vulnerability

LOW 26

Microsoft Windows Codecs Library Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0079 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-20

TI-2024-23331 CVE-2024-35270 · GHSA-w78f-h7mv-34jv

Windows iSCSI Service Denial of Service Vulnerability

LOW 26

Windows iSCSI Service Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00861 Published 2024-07-09 Fixed in 10.0.17763.6054, 10.0.20348.2582 +12 CWE-400