Microsoft update

KB5044342

Monthly Rollup

View on Microsoft →

Fixed in

Windows Server 2012 6.2.9200.25118
Windows Server 2012 (Server Core installation) 6.2.9200.25118

Fixes 46 records

TI-2024-29203 CVE-2024-43572 · GHSA-vw7j-3h6f-xqvx

Microsoft Management Console Remote Code Execution Vulnerability

CRITICAL 93KEV

Microsoft Management Console Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.66695 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-707

TI-2024-29167 CVE-2024-43532 · GHSA-8x8c-hp7f-675g

Remote Registry Service Elevation of Privilege Vulnerability

MEDIUM 54

Remote Registry Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.11966 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-636

TI-2024-29237 CVE-2024-43611 · GHSA-r6j7-f2g3-33m3

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 44

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01816 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29157 CVE-2024-43521 · GHSA-p54w-fqq6-5g63

Windows Hyper-V Denial of Service Vulnerability

MEDIUM 44

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02448 Published 2024-10-08 Fixed in 6.2.9200.25118, 6.3.9600.22221 +4 CWE-253

TI-2024-29234 CVE-2024-43608 · GHSA-jfxg-8cpv-3p24

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01412 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29233 CVE-2024-43607 · GHSA-w7gh-w2wx-25m6

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01412 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29227 CVE-2024-43599 · GHSA-76gm-3x2j-87hp

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 43

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01443 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +12 CWE-416

TI-2024-29222 CVE-2024-43593 · GHSA-fr33-mq6q-mx98

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01654 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29221 CVE-2024-43592 · GHSA-hqhq-w493-rmff

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01654 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29218 CVE-2024-43589 · GHSA-7cwx-6wm5-r7m8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01489 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29200 CVE-2024-43567 · GHSA-wj3q-v32v-hrv9

Windows Hyper-V Denial of Service Vulnerability

MEDIUM 43

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02312 Published 2024-10-08 Fixed in 6.2.9200.25118, 6.3.9600.22221 +4 CWE-770

TI-2024-29197 CVE-2024-43564 · GHSA-m84v-59h4-h9jq

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01412 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29182 CVE-2024-43549 · GHSA-357j-c5mq-xw8c

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01412 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-121

TI-2024-29179 CVE-2024-43545 · GHSA-wjqh-4vfg-j2pj

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

MEDIUM 43

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02219 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-400

TI-2024-29178 CVE-2024-43544 · GHSA-m74x-9r8g-rgwm

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability

MEDIUM 43

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02219 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-400

TI-2024-29175 CVE-2024-43541 · GHSA-w659-5wvm-43mr

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability

MEDIUM 43

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02309 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-400

TI-2024-29155 CVE-2024-43519 · GHSA-j35j-q3j5-86w5

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01496 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-197

TI-2024-29153 CVE-2024-43517 · GHSA-7h6m-cfqf-62vj

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

MEDIUM 43

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01436 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-122

TI-2024-29151 CVE-2024-43515 · GHSA-v29w-rq39-w9pw

Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability

MEDIUM 43

Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02259 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-400

TI-2024-29144 CVE-2024-43506 · GHSA-6cfg-qfcr-p769

BranchCache Denial of Service Vulnerability

MEDIUM 43

BranchCache Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02302 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +12 CWE-400

TI-2024-29098 CVE-2024-43453 · GHSA-g8gg-rcmw-wcp3

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01455 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-25543 CVE-2024-38265 · GHSA-6fhw-8mhf-cxxx

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01419 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-25492 CVE-2024-38212 · GHSA-mvw5-r6wq-28cm

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01438 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-25433 CVE-2024-38149 · GHSA-vxmv-7r5g-h75x

BranchCache Denial of Service Vulnerability

MEDIUM 43

BranchCache Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02212 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +12 CWE-400

TI-2024-25408 CVE-2024-38124 · GHSA-m454-2xvj-mc27

Windows Netlogon Elevation of Privilege Vulnerability

MEDIUM 43

Windows Netlogon Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.0 Adjacent network Low privileges No interaction EPSS 0.0118 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-287

TI-2024-29193 CVE-2024-43560 · GHSA-2523-xvgc-mmh8

Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

MEDIUM 42

Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03573 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +11 CWE-122

TI-2024-29154 CVE-2024-43518 · GHSA-j4v7-44vp-xwx9

Windows Telephony Server Remote Code Execution Vulnerability

MEDIUM 42

Windows Telephony Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00985 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-122

TI-2024-25539 CVE-2024-38261 · GHSA-99w5-pw57-7g7x

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

LOW 38

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00852 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29189 CVE-2024-43556 · GHSA-5464-ww5r-mfqm

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 37

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00716 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-416

TI-2024-29183 CVE-2024-43550 · GHSA-j6w9-r3hx-f366

Windows Secure Channel Spoofing Vulnerability

LOW 37

Windows Secure Channel Spoofing Vulnerability

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01094 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +11 CWE-295

TI-2024-29150 CVE-2024-43514 · GHSA-3p3c-7gwc-rw29

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

LOW 37

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00604 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +11 CWE-415

TI-2024-29146 CVE-2024-43509 · GHSA-phx8-q4fx-grjv

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 37

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00637 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-416

TI-2024-29139 CVE-2024-43501 · GHSA-9jpq-jcjr-f4m4

Windows Common Log File System Driver Elevation of Privilege Vulnerability

LOW 37

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00655 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-59

TI-2024-25540 CVE-2024-38262 · GHSA-75qr-mxqp-8937

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

LOW 37

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0111 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-591

TI-2024-25285 CVE-2024-37982 · GHSA-8jgp-25f5-rwmx

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

LOW 37

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00575 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +11 CWE-822

TI-2024-25282 CVE-2024-37979 · GHSA-r3px-vhhx-qhqr

Windows Kernel Elevation of Privilege Vulnerability

LOW 37

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00575 Published 2024-10-08 Fixed in 6.2.9200.25118, 6.3.9600.22221 +3 CWE-822

TI-2024-29196 CVE-2024-43563 · GHSA-5r82-w6v9-cqgg

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

LOW 36

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00456 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +11 CWE-591

TI-2024-29186 CVE-2024-43553 · GHSA-gm7j-87vp-cw43

NT OS Kernel Elevation of Privilege Vulnerability

LOW 35

NT OS Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.4 Local No auth No interaction EPSS 0.00499 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-822

TI-2024-29101 CVE-2024-43456 · GHSA-wm4p-6wrw-q6w5

Windows Remote Desktop Services Tampering Vulnerability

LOW 34

Windows Remote Desktop Services Tampering Vulnerability

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00739 Published 2024-10-08 Fixed in 6.1.7601.27366, 6.2.9200.25118 +5 CWE-284

TI-2024-29201 CVE-2024-43570 · GHSA-px36-28h2-fmcp

Windows Kernel Elevation of Privilege Vulnerability

LOW 33

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00498 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-416

TI-2024-29170 CVE-2024-43535 · GHSA-g4mh-7cf6-mrrh

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

LOW 33

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00524 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-416

TI-2024-29169 CVE-2024-43534 · GHSA-x27m-3crw-r5hj

Windows Graphics Component Information Disclosure Vulnerability

LOW 32

Windows Graphics Component Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0178 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-125

TI-2024-25286 CVE-2024-37983 · GHSA-frgc-cjvx-8wc5

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

LOW 32

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00578 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +11 CWE-822

TI-2024-25279 CVE-2024-37976 · GHSA-674w-5pgq-gr2q

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

LOW 32

Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00578 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +11 CWE-190

TI-2024-29181 CVE-2024-43547 · GHSA-5544-c8gp-4p3x

Windows Kerberos Information Disclosure Vulnerability

LOW 30

Windows Kerberos Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00652 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-325

TI-2024-29156 CVE-2024-43520 · GHSA-q96p-q693-5mh2

Windows Kernel Denial of Service Vulnerability

LOW 25

Windows Kernel Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00961 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-476