# KB5041823: August 2024 security update

KB5041823, released August 13, 2024, fixes 29 CVEs across 2 products. One of them is being exploited (CVE-2024-38193); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/microsoft/kb5041823
- Platform: Microsoft
- Released: Aug 13, 2024
- Priority: Patch now (Closes CVE-2024-38193, exploited (CISA KEV))
- CVEs: 29, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://support.microsoft.com/help/5041823

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Windows Server 2008 R2 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1.md) |  |  |
| [Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1-server-core-installation.md) |  |  |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-38193](https://patchblox.com/security/data/cve/CVE-2024-38193.md) | Patch now | Windows Ancillary Function Driver for WinSock | 7.8 | 0.2874 | CISA KEV |
| [CVE-2024-38063](https://patchblox.com/security/data/cve/CVE-2024-38063.md) | Urgent | Windows TCP/IP | 9.8 | 0.7056 | More likely |
| [CVE-2024-38144](https://patchblox.com/security/data/cve/CVE-2024-38144.md) | Urgent | Microsoft Streaming Service | 8.8 | 0.3235 | More likely |
| [CVE-2024-38196](https://patchblox.com/security/data/cve/CVE-2024-38196.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0597 | More likely |
| [CVE-2024-38125](https://patchblox.com/security/data/cve/CVE-2024-38125.md) | Urgent | Microsoft Streaming Service | 7.8 | 0.0594 | More likely |
| [CVE-2024-38140](https://patchblox.com/security/data/cve/CVE-2024-38140.md) | Urgent | Reliable Multicast Transport Driver (RMCAST) | 9.8 | 0.0381 |  |
| [CVE-2024-38198](https://patchblox.com/security/data/cve/CVE-2024-38198.md) | Urgent | Windows Print Spooler Components | 7.5 | 0.0079 | More likely |
| [CVE-2024-38199](https://patchblox.com/security/data/cve/CVE-2024-38199.md) | High | Line Printer Daemon Service (LPD) | 9.8 | 0.0223 | Disclosed |
| [CVE-2024-38116](https://patchblox.com/security/data/cve/CVE-2024-38116.md) | High | Windows IP Routing Management Snapin | 8.8 | 0.0182 |  |
| [CVE-2024-38115](https://patchblox.com/security/data/cve/CVE-2024-38115.md) | High | Windows IP Routing Management Snapin | 8.8 | 0.0163 |  |
| [CVE-2024-38120](https://patchblox.com/security/data/cve/CVE-2024-38120.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0163 |  |
| [CVE-2024-38121](https://patchblox.com/security/data/cve/CVE-2024-38121.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0163 |  |
| [CVE-2024-38128](https://patchblox.com/security/data/cve/CVE-2024-38128.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0163 |  |
| [CVE-2024-38130](https://patchblox.com/security/data/cve/CVE-2024-38130.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0163 |  |
| [CVE-2024-38127](https://patchblox.com/security/data/cve/CVE-2024-38127.md) | High | Windows Kernel | 7.8 | 0.0162 |  |
| [CVE-2024-38154](https://patchblox.com/security/data/cve/CVE-2024-38154.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0160 |  |
| [CVE-2024-38180](https://patchblox.com/security/data/cve/CVE-2024-38180.md) | High | Windows SmartScreen | 8.8 | 0.0160 |  |
| [CVE-2024-38114](https://patchblox.com/security/data/cve/CVE-2024-38114.md) | High | Windows IP Routing Management Snapin | 8.8 | 0.0160 |  |
| [CVE-2024-29995](https://patchblox.com/security/data/cve/CVE-2024-29995.md) | High | Windows Kerberos | 8.1 | 0.0146 |  |
| [CVE-2024-38131](https://patchblox.com/security/data/cve/CVE-2024-38131.md) | High | Windows Clipboard Virtual Channel Extension | 8.8 | 0.0132 |  |
| [CVE-2024-37968](https://patchblox.com/security/data/cve/CVE-2024-37968.md) | High | Microsoft Windows DNS | 7.5 | 0.0104 |  |
| [CVE-2024-38152](https://patchblox.com/security/data/cve/CVE-2024-38152.md) | High | Microsoft WDAC OLE DB provider for SQL | 7.8 | 0.0088 |  |
| [CVE-2024-38117](https://patchblox.com/security/data/cve/CVE-2024-38117.md) | High | Windows NTFS | 7.8 | 0.0069 |  |
| [CVE-2024-38134](https://patchblox.com/security/data/cve/CVE-2024-38134.md) | High | Microsoft Streaming Service | 7.8 | 0.0068 |  |
| [CVE-2024-38153](https://patchblox.com/security/data/cve/CVE-2024-38153.md) | High | Windows Kernel | 7.8 | 0.0051 |  |
| [CVE-2024-38214](https://patchblox.com/security/data/cve/CVE-2024-38214.md) | Routine | Windows Routing and Remote Access Service (RRAS) | 6.5 | 0.0157 |  |
| [CVE-2024-38151](https://patchblox.com/security/data/cve/CVE-2024-38151.md) | Routine | Windows Kernel | 5.5 | 0.0063 |  |
| [CVE-2024-38118](https://patchblox.com/security/data/cve/CVE-2024-38118.md) | Routine | Microsoft Local Security Authority Server (lsasrv) | 5.5 | 0.0063 |  |
| [CVE-2024-38122](https://patchblox.com/security/data/cve/CVE-2024-38122.md) | Routine | Microsoft Local Security Authority Server (lsasrv) | 5.5 | 0.0063 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
