# KB5041160: August 2024 cumulative update for Windows Server 2022 KB5041160, released August 13, 2024, fixes 49 CVEs across 2 products. 4 of them are being exploited (CVE-2024-38178); 4 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5041160 - Platform: Microsoft - Released: Aug 13, 2024 - Priority: Patch now (Closes CVE-2024-38178, exploited (CISA KEV)) - CVEs: 49, exploited: 4, on CISA KEV: 4 - Vendor advisory: https://support.microsoft.com/help/5041160 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2022](https://patchblox.com/security/data/product/microsoft/windows-server-2022.md) | | 20348.2655 | | [Windows Server 2022 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2022-server-core-installation.md) | | 20348.2655 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-38178](https://patchblox.com/security/data/cve/CVE-2024-38178.md) | Patch now | Windows Scripting | 7.5 | 0.4138 | CISA KEV | | [CVE-2024-38193](https://patchblox.com/security/data/cve/CVE-2024-38193.md) | Patch now | Windows Ancillary Function Driver for WinSock | 7.8 | 0.2874 | CISA KEV | | [CVE-2024-38106](https://patchblox.com/security/data/cve/CVE-2024-38106.md) | Patch now | Windows Kernel | 7.0 | 0.0634 | CISA KEV | | [CVE-2024-38107](https://patchblox.com/security/data/cve/CVE-2024-38107.md) | Patch now | Windows Power Dependency Coordinator | 7.8 | 0.0164 | CISA KEV | | [CVE-2024-38144](https://patchblox.com/security/data/cve/CVE-2024-38144.md) | Urgent | Microsoft Streaming Service | 8.8 | 0.3235 | More likely | | [CVE-2024-38148](https://patchblox.com/security/data/cve/CVE-2024-38148.md) | Urgent | Windows Transport Security Layer (TLS) | 7.5 | 0.3181 | More likely | | [CVE-2024-38196](https://patchblox.com/security/data/cve/CVE-2024-38196.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0597 | More likely | | [CVE-2024-38125](https://patchblox.com/security/data/cve/CVE-2024-38125.md) | Urgent | Microsoft Streaming Service | 7.8 | 0.0594 | More likely | | [CVE-2023-40547](https://patchblox.com/security/data/cve/CVE-2023-40547.md) | Urgent | Windows Secure Boot | 8.3 | 0.0542 | | | [CVE-2024-38140](https://patchblox.com/security/data/cve/CVE-2024-38140.md) | Urgent | Reliable Multicast Transport Driver (RMCAST) | 9.8 | 0.0381 | | | [CVE-2024-38141](https://patchblox.com/security/data/cve/CVE-2024-38141.md) | Urgent | Windows Ancillary Function Driver for WinSock | 7.8 | 0.0372 | More likely | | [CVE-2024-38150](https://patchblox.com/security/data/cve/CVE-2024-38150.md) | Urgent | Windows DWM Core Library | 7.8 | 0.0372 | More likely | | [CVE-2024-38147](https://patchblox.com/security/data/cve/CVE-2024-38147.md) | Urgent | Windows DWM Core Library | 7.8 | 0.0326 | More likely | | [CVE-2022-3775](https://patchblox.com/security/data/cve/CVE-2022-3775.md) | Urgent | Windows Secure Boot | 8.2 | 0.0104 | | | [CVE-2024-38198](https://patchblox.com/security/data/cve/CVE-2024-38198.md) | Urgent | Windows Print Spooler Components | 7.5 | 0.0079 | More likely | | [CVE-2024-38133](https://patchblox.com/security/data/cve/CVE-2024-38133.md) | Urgent | Windows Kernel | 7.8 | 0.0073 | More likely | | [CVE-2024-38126](https://patchblox.com/security/data/cve/CVE-2024-38126.md) | High | Windows Network Address Translation (NAT) | 7.5 | 0.0266 | | | [CVE-2024-38132](https://patchblox.com/security/data/cve/CVE-2024-38132.md) | High | Windows Network Address Translation (NAT) | 7.5 | 0.0250 | | | [CVE-2024-38145](https://patchblox.com/security/data/cve/CVE-2024-38145.md) | High | Windows Layer-2 Bridge Network Driver | 7.5 | 0.0246 | | | [CVE-2024-38146](https://patchblox.com/security/data/cve/CVE-2024-38146.md) | High | Windows Layer-2 Bridge Network Driver | 7.5 | 0.0246 | | | [CVE-2024-38199](https://patchblox.com/security/data/cve/CVE-2024-38199.md) | High | Line Printer Daemon Service (LPD) | 9.8 | 0.0223 | Disclosed | | [CVE-2024-38116](https://patchblox.com/security/data/cve/CVE-2024-38116.md) | High | Windows IP Routing Management Snapin | 8.8 | 0.0182 | | | [CVE-2024-38115](https://patchblox.com/security/data/cve/CVE-2024-38115.md) | High | Windows IP Routing Management Snapin | 8.8 | 0.0163 | | | [CVE-2024-38120](https://patchblox.com/security/data/cve/CVE-2024-38120.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0163 | | | [CVE-2024-38121](https://patchblox.com/security/data/cve/CVE-2024-38121.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0163 | | | [CVE-2024-38128](https://patchblox.com/security/data/cve/CVE-2024-38128.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0163 | | | [CVE-2024-38130](https://patchblox.com/security/data/cve/CVE-2024-38130.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0163 | | | [CVE-2024-38127](https://patchblox.com/security/data/cve/CVE-2024-38127.md) | High | Windows Kernel | 7.8 | 0.0162 | | | [CVE-2024-38154](https://patchblox.com/security/data/cve/CVE-2024-38154.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0160 | | | [CVE-2024-38180](https://patchblox.com/security/data/cve/CVE-2024-38180.md) | High | Windows SmartScreen | 8.8 | 0.0160 | | | [CVE-2024-38114](https://patchblox.com/security/data/cve/CVE-2024-38114.md) | High | Windows IP Routing Management Snapin | 8.8 | 0.0160 | | | [CVE-2024-29995](https://patchblox.com/security/data/cve/CVE-2024-29995.md) | High | Windows Kerberos | 8.1 | 0.0146 | | | [CVE-2024-38131](https://patchblox.com/security/data/cve/CVE-2024-38131.md) | High | Windows Clipboard Virtual Channel Extension | 8.8 | 0.0132 | | | [CVE-2024-37968](https://patchblox.com/security/data/cve/CVE-2024-37968.md) | High | Microsoft Windows DNS | 7.5 | 0.0104 | | | [CVE-2024-38152](https://patchblox.com/security/data/cve/CVE-2024-38152.md) | High | Microsoft WDAC OLE DB provider for SQL | 7.8 | 0.0088 | | | [CVE-2024-38117](https://patchblox.com/security/data/cve/CVE-2024-38117.md) | High | Windows NTFS | 7.8 | 0.0069 | | | [CVE-2024-38134](https://patchblox.com/security/data/cve/CVE-2024-38134.md) | High | Microsoft Streaming Service | 7.8 | 0.0068 | | | [CVE-2024-38215](https://patchblox.com/security/data/cve/CVE-2024-38215.md) | High | Windows Cloud Files Mini Filter Driver | 7.8 | 0.0068 | | | [CVE-2024-38142](https://patchblox.com/security/data/cve/CVE-2024-38142.md) | High | Windows Secure Kernel Mode | 7.8 | 0.0061 | | | [CVE-2022-2601](https://patchblox.com/security/data/cve/CVE-2022-2601.md) | High | Windows Secure Boot | 8.6 | 0.0052 | | | [CVE-2024-38153](https://patchblox.com/security/data/cve/CVE-2024-38153.md) | High | Windows Kernel | 7.8 | 0.0051 | | | [CVE-2024-38136](https://patchblox.com/security/data/cve/CVE-2024-38136.md) | High | Windows Resource Manager | 7.0 | 0.0043 | | | [CVE-2024-38137](https://patchblox.com/security/data/cve/CVE-2024-38137.md) | High | Windows Resource Manager | 7.0 | 0.0043 | | | [CVE-2024-38143](https://patchblox.com/security/data/cve/CVE-2024-38143.md) | Routine | Windows WLAN Auto Config Service | 4.2 | 0.0169 | | | [CVE-2024-38214](https://patchblox.com/security/data/cve/CVE-2024-38214.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0157 | | | [CVE-2024-38223](https://patchblox.com/security/data/cve/CVE-2024-38223.md) | Routine | Windows Initial Machine Configuration | 6.8 | 0.0071 | | | [CVE-2024-38151](https://patchblox.com/security/data/cve/CVE-2024-38151.md) | Routine | Windows Kernel | 5.5 | 0.0063 | | | [CVE-2024-38118](https://patchblox.com/security/data/cve/CVE-2024-38118.md) | Routine | Microsoft Local Security Authority Server (lsasrv) | 5.5 | 0.0063 | | | [CVE-2024-38122](https://patchblox.com/security/data/cve/CVE-2024-38122.md) | Routine | Microsoft Local Security Authority Server (lsasrv) | 5.5 | 0.0063 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo