Microsoft update

KB5043080

Security Update

View on Microsoft →

Fixed in

Windows 11 Version 24H2 for ARM64-based Systems 10.0.26100.1742
Windows 11 Version 24H2 for x64-based Systems 10.0.26100.1742

Fixes 29 records

TI-2024-29106 CVE-2024-43461 · GHSA-7q6v-68mf-6678

Windows MSHTML Platform Spoofing Vulnerability

CRITICAL 97KEV

Windows MSHTML Platform Spoofing Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.54486 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-451

TI-2024-25307 CVE-2024-38014 · GHSA-mvx5-3q3c-pr6w

Windows Installer Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.06263 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-269

TI-2024-25497 CVE-2024-38217 · GHSA-78v4-hxhf-xqqv

Windows Mark of the Web Security Feature Bypass Vulnerability

HIGH 82KEV

Windows Mark of the Web Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.10026 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-693

TI-2024-25519 CVE-2024-38240 · GHSA-474v-px9m-xcjx

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

MEDIUM 46

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01486 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +10 CWE-125

TI-2024-14176 CVE-2024-21416 · GHSA-rm77-w39m-fpfm

Windows TCP/IP Remote Code Execution Vulnerability

MEDIUM 46

Windows TCP/IP Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01381 Published 2024-09-10 Fixed in 10.0.17763.6293, 10.0.19044.4894 +7 CWE-122

TI-2024-25523 CVE-2024-38244 · GHSA-m4jv-p2cx-9g8r

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

MEDIUM 45

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.06194 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-20

TI-2024-25520 CVE-2024-38241 · GHSA-mphg-33v9-x9g5

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

MEDIUM 45

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.06021 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-20

TI-2024-25537 CVE-2024-38259 · GHSA-jhm7-8qm3-8x49

Microsoft Management Console Remote Code Execution Vulnerability

MEDIUM 44

Microsoft Management Console Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0189 Published 2024-09-10 Fixed in 10.0.22000.3197, 10.0.22621.4169 +4 CWE-416

TI-2024-25521 CVE-2024-38242 · GHSA-587h-34w2-xgxr

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

MEDIUM 42

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03352 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-122

TI-2024-25516 CVE-2024-38237 · GHSA-gwj7-4qx3-h44c

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

MEDIUM 42

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03408 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-122

TI-2024-25335 CVE-2024-38045 · GHSA-mp72-mr55-299x

Windows TCP/IP Remote Code Execution Vulnerability

MEDIUM 40

Windows TCP/IP Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01432 Published 2024-09-10 Fixed in 10.0.17763.6293, 10.0.19044.4894 +7 CWE-122

TI-2024-19839 CVE-2024-30077 · GHSA-79m6-3vj5-mrf7

Windows OLE Remote Code Execution Vulnerability

MEDIUM 40

Windows OLE Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01802 Published 2024-06-11 Fixed in 10.0.10240.20680, 10.0.14393.7070 +13 CWE-122

TI-2024-25528 CVE-2024-38249 · GHSA-fj4c-4j79-r43g

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 38

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0095 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-416

TI-2024-25524 CVE-2024-38245 · GHSA-9rp7-83cj-89pw

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

LOW 38

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00874 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-20

TI-2024-29102 CVE-2024-43457 · GHSA-h59m-8f5f-h863

Windows Setup and Deployment Elevation of Privilege Vulnerability

LOW 37

Windows Setup and Deployment Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00615 Published 2024-09-10 Fixed in 10.0.26100.1742 CWE-428

TI-2024-25531 CVE-2024-38253 · GHSA-8mc9-3vv7-xwf3

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

LOW 37

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00604 Published 2024-09-10 Fixed in 10.0.22000.3197, 10.0.22621.4169 +3 CWE-416

TI-2024-25530 CVE-2024-38252 · GHSA-rjw7-qg6g-6c2j

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

LOW 37

Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00604 Published 2024-09-10 Fixed in 10.0.14393.7336, 10.0.17763.6293 +8 CWE-416

TI-2024-25526 CVE-2024-38247 · GHSA-3x9f-3c9h-x7gj

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 37

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00695 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +12 CWE-415

TI-2024-25522 CVE-2024-38243 · GHSA-wggm-rx98-f2mr

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

LOW 37

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00762 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-20

TI-2024-25518 CVE-2024-38239 · GHSA-j7fx-rmf6-crmw

Windows Kerberos Elevation of Privilege Vulnerability

LOW 37

Windows Kerberos Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01749 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-1390

TI-2024-25517 CVE-2024-38238 · GHSA-jww9-vwpc-6qmf

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

LOW 37

Kernel Streaming Service Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00766 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-122

TI-2024-25336 CVE-2024-38046 · GHSA-rqjr-fpm9-pwx5

PowerShell Elevation of Privilege Vulnerability

LOW 37

PowerShell Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00695 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-20

TI-2024-25403 CVE-2024-38119 · GHSA-mvjr-3jgq-45rj

Windows Network Address Translation (NAT) Remote Code Execution Vulnerability

LOW 36

Windows Network Address Translation (NAT) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00756 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-416

TI-2024-19835 CVE-2024-30073 · GHSA-xghp-74wc-wjg3

Windows Security Zone Mapping Security Feature Bypass Vulnerability

LOW 36

Windows Security Zone Mapping Security Feature Bypass Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00899 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-41

TI-2024-25527 CVE-2024-38248 · GHSA-7c27-jcxr-97cm

Windows Storage Elevation of Privilege Vulnerability

LOW 34

Windows Storage Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00565 Published 2024-09-10 Fixed in 10.0.19044.4894, 10.0.19045.4894 +6 CWE-416

TI-2024-25525 CVE-2024-38246 · GHSA-x9x8-4xvf-mwjp

Win32k Elevation of Privilege Vulnerability

LOW 34

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00567 Published 2024-09-10 Fixed in 10.0.19044.4894, 10.0.19045.4894 +6 CWE-121

TI-2024-25513 CVE-2024-38234 · GHSA-xmv4-684g-76jm

Windows Networking Denial of Service Vulnerability

LOW 31

Windows Networking Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00929 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +13 CWE-20

TI-2024-25514 CVE-2024-38235 · GHSA-4c2x-v4q9-wm44

Windows Hyper-V Denial of Service Vulnerability

LOW 30

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00717 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-416

TI-2024-25532 CVE-2024-38254 · GHSA-xxq4-9c68-6533

Windows Authentication Information Disclosure Vulnerability

LOW 29

Windows Authentication Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00724 Published 2024-09-10 Fixed in 10.0.10240.20766, 10.0.14393.7336 +9 CWE-908