Microsoft update

KB5044288

Security Update

View on Microsoft →

Fixed in

Windows Server 2022, 23H2 Edition (Server Core installation) 10.0.25398.1189

Fixes 83 records

TI-2024-29203 CVE-2024-43572 · GHSA-vw7j-3h6f-xqvx

Microsoft Management Console Remote Code Execution Vulnerability

CRITICAL 93KEV

Microsoft Management Console Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.66695 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-707

TI-2024-29204 CVE-2024-43573 · GHSA-26r2-pm58-r4jr

Windows MSHTML Platform Spoofing Vulnerability

CRITICAL 92KEV

Windows MSHTML Platform Spoofing Vulnerability

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.46109 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +10 CWE-79

TI-2024-29167 CVE-2024-43532 · GHSA-8x8c-hp7f-675g

Remote Registry Service Elevation of Privilege Vulnerability

MEDIUM 54

Remote Registry Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.11966 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-636

TI-2024-29237 CVE-2024-43611 · GHSA-r6j7-f2g3-33m3

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 44

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01816 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29157 CVE-2024-43521 · GHSA-p54w-fqq6-5g63

Windows Hyper-V Denial of Service Vulnerability

MEDIUM 44

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02448 Published 2024-10-08 Fixed in 6.2.9200.25118, 6.3.9600.22221 +4 CWE-253

TI-2024-29234 CVE-2024-43608 · GHSA-jfxg-8cpv-3p24

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01412 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29233 CVE-2024-43607 · GHSA-w7gh-w2wx-25m6

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01412 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29227 CVE-2024-43599 · GHSA-76gm-3x2j-87hp

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 43

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01443 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +12 CWE-416

TI-2024-29222 CVE-2024-43593 · GHSA-fr33-mq6q-mx98

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01654 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29221 CVE-2024-43592 · GHSA-hqhq-w493-rmff

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01654 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29218 CVE-2024-43589 · GHSA-7cwx-6wm5-r7m8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01489 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29213 CVE-2024-43582 · GHSA-mhjf-5wgw-7v8g

Remote Desktop Protocol Server Remote Code Execution Vulnerability

MEDIUM 43

Remote Desktop Protocol Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.03157 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +8 CWE-416

TI-2024-29206 CVE-2024-43575 · GHSA-fmxm-f4r3-pvgq

Windows Hyper-V Denial of Service Vulnerability

MEDIUM 43

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02312 Published 2024-10-08 Fixed in 10.0.14393.7428, 10.0.17763.6414 +2 CWE-400

TI-2024-29200 CVE-2024-43567 · GHSA-wj3q-v32v-hrv9

Windows Hyper-V Denial of Service Vulnerability

MEDIUM 43

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02312 Published 2024-10-08 Fixed in 6.2.9200.25118, 6.3.9600.22221 +4 CWE-770

TI-2024-29198 CVE-2024-43565 · GHSA-6584-h377-42p8

Windows Network Address Translation (NAT) Denial of Service Vulnerability

MEDIUM 43

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02219 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +9 CWE-125

TI-2024-29197 CVE-2024-43564 · GHSA-m84v-59h4-h9jq

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01412 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29195 CVE-2024-43562 · GHSA-56qp-2v3f-6v3q

Windows Network Address Translation (NAT) Denial of Service Vulnerability

MEDIUM 43

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02219 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +9 CWE-125

TI-2024-29182 CVE-2024-43549 · GHSA-357j-c5mq-xw8c

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01412 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-121

TI-2024-29179 CVE-2024-43545 · GHSA-wjqh-4vfg-j2pj

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

MEDIUM 43

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02219 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-400

TI-2024-29178 CVE-2024-43544 · GHSA-m74x-9r8g-rgwm

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability

MEDIUM 43

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02219 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-400

TI-2024-29175 CVE-2024-43541 · GHSA-w659-5wvm-43mr

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability

MEDIUM 43

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02309 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-400

TI-2024-29168 CVE-2024-43533 · GHSA-9g9j-5cqg-x5cc

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 43

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01585 Published 2024-10-08 Fixed in 1.2.5709.0, 10.0.22000.3260 +5 CWE-416

TI-2024-29155 CVE-2024-43519 · GHSA-j35j-q3j5-86w5

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01496 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-197

TI-2024-29153 CVE-2024-43517 · GHSA-7h6m-cfqf-62vj

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

MEDIUM 43

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01436 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-122

TI-2024-29151 CVE-2024-43515 · GHSA-v29w-rq39-w9pw

Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability

MEDIUM 43

Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02259 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-400

TI-2024-29144 CVE-2024-43506 · GHSA-6cfg-qfcr-p769

BranchCache Denial of Service Vulnerability

MEDIUM 43

BranchCache Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02302 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +12 CWE-400

TI-2024-29098 CVE-2024-43453 · GHSA-g8gg-rcmw-wcp3

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01455 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-25543 CVE-2024-38265 · GHSA-6fhw-8mhf-cxxx

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01419 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-25492 CVE-2024-38212 · GHSA-mvw5-r6wq-28cm

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01438 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-25433 CVE-2024-38149 · GHSA-vxmv-7r5g-h75x

BranchCache Denial of Service Vulnerability

MEDIUM 43

BranchCache Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02212 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +12 CWE-400

TI-2024-25408 CVE-2024-38124 · GHSA-m454-2xvj-mc27

Windows Netlogon Elevation of Privilege Vulnerability

MEDIUM 43

Windows Netlogon Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.0 Adjacent network Low privileges No interaction EPSS 0.0118 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-287

TI-2024-29193 CVE-2024-43560 · GHSA-2523-xvgc-mmh8

Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

MEDIUM 42

Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03573 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +11 CWE-122

TI-2024-29154 CVE-2024-43518 · GHSA-j4v7-44vp-xwx9

Windows Telephony Server Remote Code Execution Vulnerability

MEDIUM 42

Windows Telephony Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00985 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-122

TI-2024-29205 CVE-2024-43574 · GHSA-mxp9-jv89-xf8h

Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

MEDIUM 40

Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.01165 Published 2024-10-08 Fixed in 10.0.19044.5011, 10.0.19045.5011 +6 CWE-416

TI-2024-29215 CVE-2024-43584 · GHSA-hq63-gmjg-m62p

Windows Scripting Engine Security Feature Bypass Vulnerability

LOW 39

Windows Scripting Engine Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00538 Published 2024-10-08 Fixed in 10.0.22000.3260, 10.0.22621.4317 +4 CWE-693

TI-2024-25539 CVE-2024-38261 · GHSA-99w5-pw57-7g7x

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

LOW 38

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00852 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-25321 CVE-2024-38029 · GHSA-4cw8-vv94-cqp8

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

LOW 38

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01404 Published 2024-10-08 Fixed in 10.0.25398.1189 CWE-73

TI-2024-19854 CVE-2024-30092 · GHSA-9cfr-h6gm-v62r

Windows Hyper-V Remote Code Execution Vulnerability

LOW 38

Windows Hyper-V Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00675 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +9 CWE-20

TI-2024-29189 CVE-2024-43556 · GHSA-5464-ww5r-mfqm

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 37

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00716 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-416

TI-2024-29184 CVE-2024-43551 · GHSA-xpcc-f29m-w2xx

Windows Storage Elevation of Privilege Vulnerability

LOW 37

Windows Storage Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00632 Published 2024-10-08 Fixed in 10.0.14393.7428, 10.0.17763.6414 +8 CWE-59

TI-2024-29183 CVE-2024-43550 · GHSA-j6w9-r3hx-f366

Windows Secure Channel Spoofing Vulnerability

LOW 37

Windows Secure Channel Spoofing Vulnerability

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01094 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +11 CWE-295

TI-2024-29150 CVE-2024-43514 · GHSA-3p3c-7gwc-rw29

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

LOW 37

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00604 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +11 CWE-415

TI-2024-29146 CVE-2024-43509 · GHSA-phx8-q4fx-grjv

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 37

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00637 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-416

TI-2024-29139 CVE-2024-43501 · GHSA-9jpq-jcjr-f4m4

Windows Common Log File System Driver Elevation of Privilege Vulnerability

LOW 37

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00655 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-59

TI-2024-25540 CVE-2024-38262 · GHSA-75qr-mxqp-8937

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

LOW 37

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0111 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-591

TI-2024-25483 CVE-2024-38202 · GHSA-gw56-mg6j-26qj

Windows Update Stack Elevation of Privilege Vulnerability

LOW 37

Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or cir…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.01678 Published 2024-08-08 Fixed in 10.0.17763.6414, 10.0.20348.2762 +7 CWE-284

TI-2024-25413 CVE-2024-38129 · GHSA-9g85-xp97-r463

Windows Kerberos Elevation of Privilege Vulnerability

LOW 37

Windows Kerberos Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01265 Published 2024-10-08 Fixed in 10.0.25398.1189 CWE-285

TI-2024-25285 CVE-2024-37982 · GHSA-8jgp-25f5-rwmx

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

LOW 37

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00575 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +11 CWE-822

TI-2024-29241 CVE-2024-43615 · GHSA-5v7q-43ww-mvjq

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

LOW 36

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.01237 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +7 CWE-73

TI-2024-29212 CVE-2024-43581 · GHSA-7w3c-pqvw-2fv2

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

LOW 36

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.01401 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +7 CWE-73

TI-2024-29196 CVE-2024-43563 · GHSA-5r82-w6v9-cqgg

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

LOW 36

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00456 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +11 CWE-591

TI-2024-29165 CVE-2024-43529 · GHSA-qr6c-xfwp-c8rr

Windows Print Spooler Elevation of Privilege Vulnerability

LOW 36

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00823 Published 2024-10-08 Fixed in 10.0.19044.5011, 10.0.19045.5011 +6 CWE-822

TI-2024-29186 CVE-2024-43553 · GHSA-gm7j-87vp-cw43

NT OS Kernel Elevation of Privilege Vulnerability

LOW 35

NT OS Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.4 Local No auth No interaction EPSS 0.00499 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-822

TI-2024-29185 CVE-2024-43552 · GHSA-mhj8-75xv-5rg4

Windows Shell Remote Code Execution Vulnerability

LOW 35

Windows Shell Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00762 Published 2024-10-08 Fixed in 10.0.22621.4317, 10.0.22631.4317 +2 CWE-416

TI-2024-13471 CVE-2024-20659 · GHSA-5mrm-qx6p-j9hx

Windows Hyper-V Security Feature Bypass Vulnerability

LOW 35

Windows Hyper-V Security Feature Bypass Vulnerability

CVSS 3.1HIGH 7.1 Adjacent network No auth User interaction EPSS 0.00941 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +7 CWE-20

TI-2024-29101 CVE-2024-43456 · GHSA-wm4p-6wrw-q6w5

Windows Remote Desktop Services Tampering Vulnerability

LOW 34

Windows Remote Desktop Services Tampering Vulnerability

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00739 Published 2024-10-08 Fixed in 6.1.7601.27366, 6.2.9200.25118 +5 CWE-284

TI-2024-29201 CVE-2024-43570 · GHSA-px36-28h2-fmcp

Windows Kernel Elevation of Privilege Vulnerability

LOW 33

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00498 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-416

TI-2024-29177 CVE-2024-43543 · GHSA-xf3v-m78w-xhq6

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

LOW 33

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00621 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +6 CWE-601

TI-2024-29171 CVE-2024-43536 · GHSA-72r9-2369-x4ch

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

LOW 33

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00621 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +6 CWE-601

TI-2024-29170 CVE-2024-43535 · GHSA-g4mh-7cf6-mrrh

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

LOW 33

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00524 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-416

TI-2024-29162 CVE-2024-43526 · GHSA-v998-vfgc-jvvp

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

LOW 33

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00669 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +6 CWE-122

TI-2024-29161 CVE-2024-43525 · GHSA-3cvx-m52x-g7v7

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

LOW 33

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00669 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +6 CWE-122

TI-2024-29160 CVE-2024-43524 · GHSA-gp9f-vwcj-2gh6

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

LOW 33

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00669 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +6 CWE-118

TI-2024-29159 CVE-2024-43523 · GHSA-9j3w-6hg7-6c6j

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

LOW 33

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00669 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +6 CWE-122

TI-2024-29169 CVE-2024-43534 · GHSA-x27m-3crw-r5hj

Windows Graphics Component Information Disclosure Vulnerability

LOW 32

Windows Graphics Component Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0178 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-125

TI-2024-25286 CVE-2024-37983 · GHSA-frgc-cjvx-8wc5

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

LOW 32

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00578 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +11 CWE-822

TI-2024-25279 CVE-2024-37976 · GHSA-674w-5pgq-gr2q

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

LOW 32

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00578 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +11 CWE-190

TI-2024-29194 CVE-2024-43561 · GHSA-4vfc-cjfg-mv6g

Windows Mobile Broadband Driver Denial of Service Vulnerability

LOW 30

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00818 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +6 CWE-125

TI-2024-29192 CVE-2024-43559 · GHSA-2ppm-vr48-8v34

Windows Mobile Broadband Driver Denial of Service Vulnerability

LOW 30

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00818 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +6 CWE-476

TI-2024-29191 CVE-2024-43558 · GHSA-49rc-r9gq-p7qq

Windows Mobile Broadband Driver Denial of Service Vulnerability

LOW 30

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00818 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +6 CWE-125

TI-2024-29190 CVE-2024-43557 · GHSA-42m7-8557-x95x

Windows Mobile Broadband Driver Denial of Service Vulnerability

LOW 30

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00818 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +6 CWE-125

TI-2024-29188 CVE-2024-43555 · GHSA-jc5c-mxfr-h9gj

Windows Mobile Broadband Driver Denial of Service Vulnerability

LOW 30

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00818 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +6 CWE-125

TI-2024-29181 CVE-2024-43547 · GHSA-5544-c8gp-4p3x

Windows Kerberos Information Disclosure Vulnerability

LOW 30

Windows Kerberos Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00652 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-325

TI-2024-29176 CVE-2024-43542 · GHSA-4vjg-fwqm-8pf4

Windows Mobile Broadband Driver Denial of Service Vulnerability

LOW 30

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00799 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +6 CWE-125

TI-2024-29174 CVE-2024-43540 · GHSA-7wxw-cqg4-pq3v

Windows Mobile Broadband Driver Denial of Service Vulnerability

LOW 30

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00799 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +6 CWE-125

TI-2024-29173 CVE-2024-43538 · GHSA-ph6j-cj95-5hmr

Windows Mobile Broadband Driver Denial of Service Vulnerability

LOW 30

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00799 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +6 CWE-125

TI-2024-29172 CVE-2024-43537 · GHSA-cvv2-fxc5-qmp8

Windows Mobile Broadband Driver Denial of Service Vulnerability

LOW 30

Windows Mobile Broadband Driver Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00799 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +6 CWE-125

TI-2024-29187 CVE-2024-43554 · GHSA-q34c-crf5-4984

Windows Kernel-Mode Driver Information Disclosure Vulnerability

LOW 26

Windows Kernel-Mode Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00631 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +9 CWE-212

TI-2024-29180 CVE-2024-43546 · GHSA-mqfp-qpvj-ghjm

Windows Cryptographic Information Disclosure Vulnerability

LOW 26

Windows Cryptographic Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.00627 Published 2024-10-08 Fixed in 10.0.19044.5011, 10.0.19045.5011 +6 CWE-203

TI-2024-29145 CVE-2024-43508 · GHSA-xr4r-46x6-qcpg

Windows Graphics Component Information Disclosure Vulnerability

LOW 26

Windows Graphics Component Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00629 Published 2024-10-08 Fixed in 10.0.22621.4317, 10.0.22631.4317 +2 CWE-125

TI-2024-29138 CVE-2024-43500 · GHSA-rf6g-5rmm-3x58

Windows Resilient File System (ReFS) Information Disclosure Vulnerability

LOW 26

Windows Resilient File System (ReFS) Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00629 Published 2024-10-08 Fixed in 10.0.22621.4317, 10.0.22631.4317 +2 CWE-126

TI-2024-29216 CVE-2024-43585 · GHSA-47p2-hp68-j43r

Code Integrity Guard Security Feature Bypass Vulnerability

LOW 25

Code Integrity Guard Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00488 Published 2024-10-08 Fixed in 10.0.17763.6414, 10.0.19044.5011 +7 CWE-693

TI-2024-29156 CVE-2024-43520 · GHSA-q96p-q693-5mh2

Windows Kernel Denial of Service Vulnerability

LOW 25

Windows Kernel Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00961 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-476