# KB5034809: February 2024 security update KB5034809, released February 13, 2024, fixes 27 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5034809 - Platform: Microsoft - Released: Feb 13, 2024 - Priority: Urgent (Closes CVE-2024-21357, exploitation more likely) - CVEs: 27, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://support.microsoft.com/help/5034809 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2008 R2 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1.md) | | | | [Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1-server-core-installation.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-21357](https://patchblox.com/security/data/cve/CVE-2024-21357.md) | Urgent | Windows Internet Connection Sharing (ICS) | 8.1 | 0.2690 | More likely | | [CVE-2023-50387](https://patchblox.com/security/data/cve/CVE-2023-50387.md) | High | Role: DNS Server | 7.5 | 0.9999 | | | [CVE-2024-21372](https://patchblox.com/security/data/cve/CVE-2024-21372.md) | High | Windows OLE | 8.8 | 0.0181 | | | [CVE-2024-21358](https://patchblox.com/security/data/cve/CVE-2024-21358.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0177 | | | [CVE-2024-21360](https://patchblox.com/security/data/cve/CVE-2024-21360.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0177 | | | [CVE-2024-21365](https://patchblox.com/security/data/cve/CVE-2024-21365.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0177 | | | [CVE-2024-21366](https://patchblox.com/security/data/cve/CVE-2024-21366.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0177 | | | [CVE-2024-21370](https://patchblox.com/security/data/cve/CVE-2024-21370.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0177 | | | [CVE-2024-21420](https://patchblox.com/security/data/cve/CVE-2024-21420.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0173 | | | [CVE-2024-21375](https://patchblox.com/security/data/cve/CVE-2024-21375.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0165 | | | [CVE-2024-21349](https://patchblox.com/security/data/cve/CVE-2024-21349.md) | High | Microsoft ActiveX | 8.8 | 0.0164 | | | [CVE-2024-21359](https://patchblox.com/security/data/cve/CVE-2024-21359.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0164 | | | [CVE-2024-21361](https://patchblox.com/security/data/cve/CVE-2024-21361.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0164 | | | [CVE-2024-21367](https://patchblox.com/security/data/cve/CVE-2024-21367.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0164 | | | [CVE-2024-21368](https://patchblox.com/security/data/cve/CVE-2024-21368.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0164 | | | [CVE-2024-21352](https://patchblox.com/security/data/cve/CVE-2024-21352.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0163 | | | [CVE-2024-21391](https://patchblox.com/security/data/cve/CVE-2024-21391.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0163 | | | [CVE-2024-21369](https://patchblox.com/security/data/cve/CVE-2024-21369.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0155 | | | [CVE-2024-21350](https://patchblox.com/security/data/cve/CVE-2024-21350.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0148 | | | [CVE-2024-21347](https://patchblox.com/security/data/cve/CVE-2024-21347.md) | High | SQL Server | 7.5 | 0.0137 | | | [CVE-2024-21406](https://patchblox.com/security/data/cve/CVE-2024-21406.md) | High | Microsoft Windows | 7.5 | 0.0086 | | | [CVE-2024-21363](https://patchblox.com/security/data/cve/CVE-2024-21363.md) | High | Windows Message Queuing | 7.8 | 0.0080 | | | [CVE-2024-21354](https://patchblox.com/security/data/cve/CVE-2024-21354.md) | High | Windows Message Queuing | 7.8 | 0.0061 | | | [CVE-2024-21405](https://patchblox.com/security/data/cve/CVE-2024-21405.md) | High | Windows Message Queuing | 7.0 | 0.0038 | | | [CVE-2024-21355](https://patchblox.com/security/data/cve/CVE-2024-21355.md) | High | Windows Message Queuing | 7.0 | 0.0032 | | | [CVE-2024-21356](https://patchblox.com/security/data/cve/CVE-2024-21356.md) | Routine | Windows LDAP - Lightweight Directory Access Protocol | 6.5 | 0.0208 | | | [CVE-2024-21340](https://patchblox.com/security/data/cve/CVE-2024-21340.md) | Routine | Windows Kernel | 4.6 | 0.0075 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo