Microsoft update

KB5044356

Monthly Rollup

View on Microsoft →

Fixed in

Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.27366
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.27366

Fixes 36 records

TI-2024-29203 CVE-2024-43572 · GHSA-vw7j-3h6f-xqvx

Microsoft Management Console Remote Code Execution Vulnerability

CRITICAL 93KEV

Microsoft Management Console Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.66695 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-707

TI-2024-29167 CVE-2024-43532 · GHSA-8x8c-hp7f-675g

Remote Registry Service Elevation of Privilege Vulnerability

MEDIUM 54

Remote Registry Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.11966 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-636

TI-2024-29237 CVE-2024-43611 · GHSA-r6j7-f2g3-33m3

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 44

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01816 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29234 CVE-2024-43608 · GHSA-jfxg-8cpv-3p24

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01412 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29233 CVE-2024-43607 · GHSA-w7gh-w2wx-25m6

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01412 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29227 CVE-2024-43599 · GHSA-76gm-3x2j-87hp

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 43

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01443 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +12 CWE-416

TI-2024-29222 CVE-2024-43593 · GHSA-fr33-mq6q-mx98

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01654 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29221 CVE-2024-43592 · GHSA-hqhq-w493-rmff

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01654 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29218 CVE-2024-43589 · GHSA-7cwx-6wm5-r7m8

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01489 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29197 CVE-2024-43564 · GHSA-m84v-59h4-h9jq

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01412 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29182 CVE-2024-43549 · GHSA-357j-c5mq-xw8c

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01412 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-121

TI-2024-29179 CVE-2024-43545 · GHSA-wjqh-4vfg-j2pj

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

MEDIUM 43

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02219 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-400

TI-2024-29178 CVE-2024-43544 · GHSA-m74x-9r8g-rgwm

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability

MEDIUM 43

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02219 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-400

TI-2024-29175 CVE-2024-43541 · GHSA-w659-5wvm-43mr

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability

MEDIUM 43

Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02309 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-400

TI-2024-29155 CVE-2024-43519 · GHSA-j35j-q3j5-86w5

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01496 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-197

TI-2024-29153 CVE-2024-43517 · GHSA-7h6m-cfqf-62vj

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

MEDIUM 43

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01436 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-122

TI-2024-29151 CVE-2024-43515 · GHSA-v29w-rq39-w9pw

Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability

MEDIUM 43

Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02259 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-400

TI-2024-29144 CVE-2024-43506 · GHSA-6cfg-qfcr-p769

BranchCache Denial of Service Vulnerability

MEDIUM 43

BranchCache Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02302 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +12 CWE-400

TI-2024-29098 CVE-2024-43453 · GHSA-g8gg-rcmw-wcp3

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01455 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-25543 CVE-2024-38265 · GHSA-6fhw-8mhf-cxxx

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01419 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-25492 CVE-2024-38212 · GHSA-mvw5-r6wq-28cm

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 43

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01438 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-25433 CVE-2024-38149 · GHSA-vxmv-7r5g-h75x

BranchCache Denial of Service Vulnerability

MEDIUM 43

BranchCache Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02212 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +12 CWE-400

TI-2024-25408 CVE-2024-38124 · GHSA-m454-2xvj-mc27

Windows Netlogon Elevation of Privilege Vulnerability

MEDIUM 43

Windows Netlogon Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.0 Adjacent network Low privileges No interaction EPSS 0.0118 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-287

TI-2024-29154 CVE-2024-43518 · GHSA-j4v7-44vp-xwx9

Windows Telephony Server Remote Code Execution Vulnerability

MEDIUM 42

Windows Telephony Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00985 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-122

TI-2024-25539 CVE-2024-38261 · GHSA-99w5-pw57-7g7x

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

LOW 38

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00852 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-122

TI-2024-29189 CVE-2024-43556 · GHSA-5464-ww5r-mfqm

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 37

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00716 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-416

TI-2024-29146 CVE-2024-43509 · GHSA-phx8-q4fx-grjv

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 37

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00637 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-416

TI-2024-29139 CVE-2024-43501 · GHSA-9jpq-jcjr-f4m4

Windows Common Log File System Driver Elevation of Privilege Vulnerability

LOW 37

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00655 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-59

TI-2024-25540 CVE-2024-38262 · GHSA-75qr-mxqp-8937

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

LOW 37

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0111 Published 2024-10-08 Fixed in 6.0.6003.22918, 6.1.7601.27366 +6 CWE-591

TI-2024-29186 CVE-2024-43553 · GHSA-gm7j-87vp-cw43

NT OS Kernel Elevation of Privilege Vulnerability

LOW 35

NT OS Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.4 Local No auth No interaction EPSS 0.00499 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-822

TI-2024-29101 CVE-2024-43456 · GHSA-wm4p-6wrw-q6w5

Windows Remote Desktop Services Tampering Vulnerability

LOW 34

Windows Remote Desktop Services Tampering Vulnerability

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00739 Published 2024-10-08 Fixed in 6.1.7601.27366, 6.2.9200.25118 +5 CWE-284

TI-2024-29201 CVE-2024-43570 · GHSA-px36-28h2-fmcp

Windows Kernel Elevation of Privilege Vulnerability

LOW 33

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00498 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-416

TI-2024-29170 CVE-2024-43535 · GHSA-g4mh-7cf6-mrrh

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

LOW 33

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00524 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-416

TI-2024-29169 CVE-2024-43534 · GHSA-x27m-3crw-r5hj

Windows Graphics Component Information Disclosure Vulnerability

LOW 32

Windows Graphics Component Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0178 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-125

TI-2024-29181 CVE-2024-43547 · GHSA-5544-c8gp-4p3x

Windows Kerberos Information Disclosure Vulnerability

LOW 30

Windows Kerberos Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00652 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-325

TI-2024-29156 CVE-2024-43520 · GHSA-q96p-q693-5mh2

Windows Kernel Denial of Service Vulnerability

LOW 25

Windows Kernel Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00961 Published 2024-10-08 Fixed in 10.0.10240.20796, 10.0.14393.7428 +13 CWE-476