# KB5044321: October 2024 security update KB5044321, released October 8, 2024, fixes 36 CVEs across 2 products. One of them is being exploited (CVE-2024-43572); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5044321 - Platform: Microsoft - Released: Oct 8, 2024 - Priority: Patch now (Closes CVE-2024-43572, exploited (CISA KEV)) - CVEs: 36, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://support.microsoft.com/help/5044321 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2008 R2 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1.md) | | | | [Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1-server-core-installation.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-43572](https://patchblox.com/security/data/cve/CVE-2024-43572.md) | Patch now | Microsoft Management Console | 7.8 | 0.6670 | CISA KEV, Disclosed | | [CVE-2024-43556](https://patchblox.com/security/data/cve/CVE-2024-43556.md) | Urgent | Microsoft Graphics Component | 7.8 | 0.0072 | More likely | | [CVE-2024-43509](https://patchblox.com/security/data/cve/CVE-2024-43509.md) | Urgent | Microsoft Graphics Component | 7.8 | 0.0064 | More likely | | [CVE-2024-43532](https://patchblox.com/security/data/cve/CVE-2024-43532.md) | High | RPC Endpoint Mapper Service | 8.8 | 0.1197 | | | [CVE-2024-43541](https://patchblox.com/security/data/cve/CVE-2024-43541.md) | High | Microsoft Simple Certificate Enrollment Protocol | 7.5 | 0.0231 | | | [CVE-2024-43506](https://patchblox.com/security/data/cve/CVE-2024-43506.md) | High | BranchCache | 7.5 | 0.0230 | | | [CVE-2024-43515](https://patchblox.com/security/data/cve/CVE-2024-43515.md) | High | Internet Small Computer Systems Interface (iSCSI) | 7.5 | 0.0226 | | | [CVE-2024-43544](https://patchblox.com/security/data/cve/CVE-2024-43544.md) | High | Microsoft Simple Certificate Enrollment Protocol | 7.5 | 0.0222 | | | [CVE-2024-43545](https://patchblox.com/security/data/cve/CVE-2024-43545.md) | High | Windows Online Certificate Status Protocol (OCSP) | 7.5 | 0.0222 | | | [CVE-2024-38149](https://patchblox.com/security/data/cve/CVE-2024-38149.md) | High | BranchCache | 7.5 | 0.0221 | | | [CVE-2024-43611](https://patchblox.com/security/data/cve/CVE-2024-43611.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0182 | | | [CVE-2024-43592](https://patchblox.com/security/data/cve/CVE-2024-43592.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0165 | | | [CVE-2024-43593](https://patchblox.com/security/data/cve/CVE-2024-43593.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0165 | | | [CVE-2024-43519](https://patchblox.com/security/data/cve/CVE-2024-43519.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0150 | | | [CVE-2024-43589](https://patchblox.com/security/data/cve/CVE-2024-43589.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0149 | | | [CVE-2024-43453](https://patchblox.com/security/data/cve/CVE-2024-43453.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0146 | | | [CVE-2024-43599](https://patchblox.com/security/data/cve/CVE-2024-43599.md) | High | Remote Desktop Client | 8.8 | 0.0144 | | | [CVE-2024-38212](https://patchblox.com/security/data/cve/CVE-2024-38212.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0144 | | | [CVE-2024-43517](https://patchblox.com/security/data/cve/CVE-2024-43517.md) | High | Microsoft ActiveX | 8.8 | 0.0144 | | | [CVE-2024-38265](https://patchblox.com/security/data/cve/CVE-2024-38265.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0142 | | | [CVE-2024-43549](https://patchblox.com/security/data/cve/CVE-2024-43549.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0141 | | | [CVE-2024-43564](https://patchblox.com/security/data/cve/CVE-2024-43564.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0141 | | | [CVE-2024-43607](https://patchblox.com/security/data/cve/CVE-2024-43607.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0141 | | | [CVE-2024-43608](https://patchblox.com/security/data/cve/CVE-2024-43608.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0141 | | | [CVE-2024-38124](https://patchblox.com/security/data/cve/CVE-2024-38124.md) | High | Windows Netlogon | 9.0 | 0.0118 | | | [CVE-2024-38262](https://patchblox.com/security/data/cve/CVE-2024-38262.md) | High | Windows Remote Desktop Licensing Service | 7.5 | 0.0111 | | | [CVE-2024-43518](https://patchblox.com/security/data/cve/CVE-2024-43518.md) | High | Windows Telephony Server | 8.8 | 0.0099 | | | [CVE-2024-38261](https://patchblox.com/security/data/cve/CVE-2024-38261.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.8 | 0.0085 | | | [CVE-2024-43501](https://patchblox.com/security/data/cve/CVE-2024-43501.md) | High | Windows Common Log File System Driver | 7.8 | 0.0066 | | | [CVE-2024-43535](https://patchblox.com/security/data/cve/CVE-2024-43535.md) | High | Windows Kernel-Mode Drivers | 7.0 | 0.0052 | | | [CVE-2024-43553](https://patchblox.com/security/data/cve/CVE-2024-43553.md) | High | Windows NT OS Kernel | 7.4 | 0.0050 | | | [CVE-2024-43534](https://patchblox.com/security/data/cve/CVE-2024-43534.md) | Routine | Microsoft Graphics Component | 6.5 | 0.0178 | | | [CVE-2024-43520](https://patchblox.com/security/data/cve/CVE-2024-43520.md) | Routine | Windows Kernel | 5.0 | 0.0096 | | | [CVE-2024-43456](https://patchblox.com/security/data/cve/CVE-2024-43456.md) | Routine | Windows Remote Desktop Services | 4.8 | 0.0074 | | | [CVE-2024-43547](https://patchblox.com/security/data/cve/CVE-2024-43547.md) | Routine | Windows Kerberos | 6.5 | 0.0065 | | | [CVE-2024-43570](https://patchblox.com/security/data/cve/CVE-2024-43570.md) | Routine | Windows Kernel | 6.4 | 0.0050 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo