# KB5044288: October 2024 cumulative update for Windows Server 23H2 KB5044288, released October 8, 2024, fixes 86 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.1189). 2 of them are being exploited (CVE-2024-43572); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5044288 - Platform: Microsoft - Released: Oct 8, 2024 - Priority: Patch now (Closes CVE-2024-43572, exploited (CISA KEV)) - CVEs: 86, exploited: 2, on CISA KEV: 2 - Vendor advisory: https://support.microsoft.com/help/5044288 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2022, 23H2 Edition (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2022-23h2-edition-server-core-installation.md) | | 25398.1189 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-43572](https://patchblox.com/security/data/cve/CVE-2024-43572.md) | Patch now | Microsoft Management Console | 7.8 | 0.6670 | CISA KEV, Disclosed | | [CVE-2024-43573](https://patchblox.com/security/data/cve/CVE-2024-43573.md) | Patch now | Windows MSHTML Platform | 6.5 | 0.4611 | CISA KEV, Disclosed | | [CVE-2024-43560](https://patchblox.com/security/data/cve/CVE-2024-43560.md) | Urgent | Windows Storage Port Driver | 7.8 | 0.0357 | More likely | | [CVE-2024-43582](https://patchblox.com/security/data/cve/CVE-2024-43582.md) | Urgent | Windows Remote Desktop | 8.1 | 0.0316 | | | [CVE-2024-43581](https://patchblox.com/security/data/cve/CVE-2024-43581.md) | Urgent | OpenSSH for Windows | 7.1 | 0.0140 | More likely | | [CVE-2024-43615](https://patchblox.com/security/data/cve/CVE-2024-43615.md) | Urgent | OpenSSH for Windows | 7.1 | 0.0124 | More likely | | [CVE-2024-43556](https://patchblox.com/security/data/cve/CVE-2024-43556.md) | Urgent | Microsoft Graphics Component | 7.8 | 0.0072 | More likely | | [CVE-2024-43509](https://patchblox.com/security/data/cve/CVE-2024-43509.md) | Urgent | Microsoft Graphics Component | 7.8 | 0.0064 | More likely | | [CVE-2024-43532](https://patchblox.com/security/data/cve/CVE-2024-43532.md) | High | RPC Endpoint Mapper Service | 8.8 | 0.1197 | | | [CVE-2024-6197](https://patchblox.com/security/data/cve/CVE-2024-6197.md) | High | Windows cURL Implementation | 8.8 | 0.0430 | Disclosed | | [CVE-2024-43521](https://patchblox.com/security/data/cve/CVE-2024-43521.md) | High | Role: Windows Hyper-V | 7.5 | 0.0245 | | | [CVE-2024-43567](https://patchblox.com/security/data/cve/CVE-2024-43567.md) | High | Role: Windows Hyper-V | 7.5 | 0.0231 | | | [CVE-2024-43575](https://patchblox.com/security/data/cve/CVE-2024-43575.md) | High | Role: Windows Hyper-V | 7.5 | 0.0231 | | | [CVE-2024-43541](https://patchblox.com/security/data/cve/CVE-2024-43541.md) | High | Microsoft Simple Certificate Enrollment Protocol | 7.5 | 0.0231 | | | [CVE-2024-43506](https://patchblox.com/security/data/cve/CVE-2024-43506.md) | High | BranchCache | 7.5 | 0.0230 | | | [CVE-2024-43515](https://patchblox.com/security/data/cve/CVE-2024-43515.md) | High | Internet Small Computer Systems Interface (iSCSI) | 7.5 | 0.0226 | | | [CVE-2024-43544](https://patchblox.com/security/data/cve/CVE-2024-43544.md) | High | Microsoft Simple Certificate Enrollment Protocol | 7.5 | 0.0222 | | | [CVE-2024-43545](https://patchblox.com/security/data/cve/CVE-2024-43545.md) | High | Windows Online Certificate Status Protocol (OCSP) | 7.5 | 0.0222 | | | [CVE-2024-43562](https://patchblox.com/security/data/cve/CVE-2024-43562.md) | High | Windows Network Address Translation (NAT) | 7.5 | 0.0222 | | | [CVE-2024-43565](https://patchblox.com/security/data/cve/CVE-2024-43565.md) | High | Windows Network Address Translation (NAT) | 7.5 | 0.0222 | | | [CVE-2024-38149](https://patchblox.com/security/data/cve/CVE-2024-38149.md) | High | BranchCache | 7.5 | 0.0221 | | | [CVE-2024-43611](https://patchblox.com/security/data/cve/CVE-2024-43611.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0182 | | | [CVE-2024-38202](https://patchblox.com/security/data/cve/CVE-2024-38202.md) | High | Windows Update Stack | 7.3 | 0.0168 | Disclosed | | [CVE-2024-43592](https://patchblox.com/security/data/cve/CVE-2024-43592.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0165 | | | [CVE-2024-43593](https://patchblox.com/security/data/cve/CVE-2024-43593.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0165 | | | [CVE-2024-43533](https://patchblox.com/security/data/cve/CVE-2024-43533.md) | High | Remote Desktop Client | 8.8 | 0.0159 | | | [CVE-2024-43519](https://patchblox.com/security/data/cve/CVE-2024-43519.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0150 | | | [CVE-2024-43589](https://patchblox.com/security/data/cve/CVE-2024-43589.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0149 | | | [CVE-2024-43453](https://patchblox.com/security/data/cve/CVE-2024-43453.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0146 | | | [CVE-2024-43599](https://patchblox.com/security/data/cve/CVE-2024-43599.md) | High | Remote Desktop Client | 8.8 | 0.0144 | | | [CVE-2024-38212](https://patchblox.com/security/data/cve/CVE-2024-38212.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0144 | | | [CVE-2024-43517](https://patchblox.com/security/data/cve/CVE-2024-43517.md) | High | Microsoft ActiveX | 8.8 | 0.0144 | | | [CVE-2024-38265](https://patchblox.com/security/data/cve/CVE-2024-38265.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0142 | | | [CVE-2021-45985](https://patchblox.com/security/data/cve/CVE-2021-45985.md) | High | Open Source Software | 7.5 | 0.0142 | | | [CVE-2024-43549](https://patchblox.com/security/data/cve/CVE-2024-43549.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0141 | | | [CVE-2024-43564](https://patchblox.com/security/data/cve/CVE-2024-43564.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0141 | | | [CVE-2024-43607](https://patchblox.com/security/data/cve/CVE-2024-43607.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0141 | | | [CVE-2024-43608](https://patchblox.com/security/data/cve/CVE-2024-43608.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0141 | | | [CVE-2024-38029](https://patchblox.com/security/data/cve/CVE-2024-38029.md) | High | OpenSSH for Windows | 7.5 | 0.0140 | | | [CVE-2024-38129](https://patchblox.com/security/data/cve/CVE-2024-38129.md) | High | Windows Kerberos | 7.5 | 0.0127 | | | [CVE-2024-38124](https://patchblox.com/security/data/cve/CVE-2024-38124.md) | High | Windows Netlogon | 9.0 | 0.0118 | | | [CVE-2024-43574](https://patchblox.com/security/data/cve/CVE-2024-43574.md) | High | Microsoft Windows Speech | 8.3 | 0.0117 | | | [CVE-2024-38262](https://patchblox.com/security/data/cve/CVE-2024-38262.md) | High | Windows Remote Desktop Licensing Service | 7.5 | 0.0111 | | | [CVE-2024-43550](https://patchblox.com/security/data/cve/CVE-2024-43550.md) | High | Windows Secure Channel | 7.4 | 0.0109 | | | [CVE-2024-43518](https://patchblox.com/security/data/cve/CVE-2024-43518.md) | High | Windows Telephony Server | 8.8 | 0.0099 | | | [CVE-2024-20659](https://patchblox.com/security/data/cve/CVE-2024-20659.md) | High | Role: Windows Hyper-V | 7.1 | 0.0094 | Disclosed | | [CVE-2024-38261](https://patchblox.com/security/data/cve/CVE-2024-38261.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.8 | 0.0085 | | | [CVE-2024-43529](https://patchblox.com/security/data/cve/CVE-2024-43529.md) | High | Windows Print Spooler Components | 7.3 | 0.0082 | | | [CVE-2024-43552](https://patchblox.com/security/data/cve/CVE-2024-43552.md) | High | Windows Shell | 7.3 | 0.0076 | | | [CVE-2024-30092](https://patchblox.com/security/data/cve/CVE-2024-30092.md) | High | Windows Hyper-V | 8.0 | 0.0068 | | | [CVE-2024-43501](https://patchblox.com/security/data/cve/CVE-2024-43501.md) | High | Windows Common Log File System Driver | 7.8 | 0.0066 | | | [CVE-2024-43551](https://patchblox.com/security/data/cve/CVE-2024-43551.md) | High | Windows Storage | 7.8 | 0.0063 | | | [CVE-2024-43514](https://patchblox.com/security/data/cve/CVE-2024-43514.md) | High | Windows NTFS | 7.8 | 0.0060 | | | [CVE-2024-43584](https://patchblox.com/security/data/cve/CVE-2024-43584.md) | High | Windows Scripting | 7.7 | 0.0054 | | | [CVE-2024-43535](https://patchblox.com/security/data/cve/CVE-2024-43535.md) | High | Windows Kernel-Mode Drivers | 7.0 | 0.0052 | | | [CVE-2022-0001](https://patchblox.com/security/data/cve/CVE-2022-0001.md) | High | Intel | 8.2 | 0.0051 | | | [CVE-2024-43553](https://patchblox.com/security/data/cve/CVE-2024-43553.md) | High | Windows NT OS Kernel | 7.4 | 0.0050 | | | [CVE-2024-43563](https://patchblox.com/security/data/cve/CVE-2024-43563.md) | High | Windows Ancillary Function Driver for WinSock | 7.8 | 0.0046 | | | [CVE-2024-43534](https://patchblox.com/security/data/cve/CVE-2024-43534.md) | Routine | Microsoft Graphics Component | 6.5 | 0.0178 | | | [CVE-2024-43520](https://patchblox.com/security/data/cve/CVE-2024-43520.md) | Routine | Windows Kernel | 5.0 | 0.0096 | | | [CVE-2024-43555](https://patchblox.com/security/data/cve/CVE-2024-43555.md) | Routine | Windows Mobile Broadband | 6.5 | 0.0082 | | | [CVE-2024-43557](https://patchblox.com/security/data/cve/CVE-2024-43557.md) | Routine | Windows Mobile Broadband | 6.5 | 0.0082 | | | [CVE-2024-43558](https://patchblox.com/security/data/cve/CVE-2024-43558.md) | Routine | Windows Mobile Broadband | 6.5 | 0.0082 | | | [CVE-2024-43559](https://patchblox.com/security/data/cve/CVE-2024-43559.md) | Routine | Windows Mobile Broadband | 6.5 | 0.0082 | | | [CVE-2024-43561](https://patchblox.com/security/data/cve/CVE-2024-43561.md) | Routine | Windows Mobile Broadband | 6.5 | 0.0082 | | | [CVE-2024-43537](https://patchblox.com/security/data/cve/CVE-2024-43537.md) | Routine | Windows Mobile Broadband | 6.5 | 0.0080 | | | [CVE-2024-43538](https://patchblox.com/security/data/cve/CVE-2024-43538.md) | Routine | Windows Mobile Broadband | 6.5 | 0.0080 | | | [CVE-2024-43540](https://patchblox.com/security/data/cve/CVE-2024-43540.md) | Routine | Windows Mobile Broadband | 6.5 | 0.0080 | | | [CVE-2024-43542](https://patchblox.com/security/data/cve/CVE-2024-43542.md) | Routine | Windows Mobile Broadband | 6.5 | 0.0080 | | | [CVE-2024-43456](https://patchblox.com/security/data/cve/CVE-2024-43456.md) | Routine | Windows Remote Desktop Services | 4.8 | 0.0074 | | | [CVE-2024-43523](https://patchblox.com/security/data/cve/CVE-2024-43523.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0067 | | | [CVE-2024-43524](https://patchblox.com/security/data/cve/CVE-2024-43524.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0067 | | | [CVE-2024-43525](https://patchblox.com/security/data/cve/CVE-2024-43525.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0067 | | | [CVE-2024-43526](https://patchblox.com/security/data/cve/CVE-2024-43526.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0067 | | | [CVE-2024-43547](https://patchblox.com/security/data/cve/CVE-2024-43547.md) | Routine | Windows Kerberos | 6.5 | 0.0065 | | | [CVE-2024-43554](https://patchblox.com/security/data/cve/CVE-2024-43554.md) | Routine | Windows Kernel-Mode Drivers | 5.5 | 0.0063 | | | [CVE-2024-43500](https://patchblox.com/security/data/cve/CVE-2024-43500.md) | Routine | Windows Resilient File System (ReFS) | 5.5 | 0.0063 | | | [CVE-2024-43508](https://patchblox.com/security/data/cve/CVE-2024-43508.md) | Routine | Microsoft Graphics Component | 5.5 | 0.0063 | | | [CVE-2024-43546](https://patchblox.com/security/data/cve/CVE-2024-43546.md) | Routine | Windows Cryptographic Services | 5.6 | 0.0063 | | | [CVE-2024-43536](https://patchblox.com/security/data/cve/CVE-2024-43536.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0062 | | | [CVE-2024-43543](https://patchblox.com/security/data/cve/CVE-2024-43543.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0062 | | | [CVE-2024-37976](https://patchblox.com/security/data/cve/CVE-2024-37976.md) | Routine | Windows EFI Partition | 6.7 | 0.0058 | | | [CVE-2024-37983](https://patchblox.com/security/data/cve/CVE-2024-37983.md) | Routine | Windows EFI Partition | 6.7 | 0.0058 | | | [CVE-2024-37982](https://patchblox.com/security/data/cve/CVE-2024-37982.md) | Routine | Windows EFI Partition | 6.7 | 0.0058 | | | [CVE-2024-43570](https://patchblox.com/security/data/cve/CVE-2024-43570.md) | Routine | Windows Kernel | 6.4 | 0.0050 | | | [CVE-2024-43585](https://patchblox.com/security/data/cve/CVE-2024-43585.md) | Routine | Code Integrity Guard | 5.5 | 0.0049 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo