Microsoft · ServicingStack update · January 9, 2024

KB5034130: January 2024 cumulative update for Windows Server 23H2

KB5034130, released January 9, 2024, fixes 35 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.643). None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
35
2 rated Critical
Exploited
0
None reported
Exploitation more likely
7
Vendor assessment
Highest EPSS
0.7216
99th percentile

Priority of the 35 CVEs

Patch now 0 Urgent 8 High 10 Routine 17

Applies to

ProductBuild after install
Windows Server 2022, 23H2 Edition (Server Core installation)25398.643

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2024-20674 Windows Authentication Methods Security Feature Bypass 8.8 0.1717 More likely
Urgent CVE-2024-21310 Windows Cloud Files Mini Filter Driver Elevation of Privilege 7.8 0.1160 More likely
Urgent CVE-2024-20698 Windows Kernel Elevation of Privilege 7.8 0.0865 More likely
Urgent CVE-2024-20653 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0449 More likely
Urgent CVE-2024-20683 Windows Win32K Elevation of Privilege 7.8 0.0421 More likely
Urgent CVE-2024-20700 Windows Hyper-V Remote Code Execution 7.5 0.0395 Exploitation Less Likely
Urgent CVE-2024-20652 Windows Scripting Security Feature Bypass 8.1 0.0208 More likely
Urgent CVE-2024-20686 Windows Win32 Kernel Subsystem Elevation of Privilege 7.8 0.0067 More likely
High CVE-2024-20697 Windows Libarchive Remote Code Execution 7.3 0.7216 Exploitation Less Likely
High CVE-2024-20696 Windows Libarchive Remote Code Execution 7.3 0.0315 Exploitation Less Likely
High CVE-2024-20661 Windows Message Queuing Denial of Service 7.5 0.0276 Exploitation Less Likely
High CVE-2024-20687 Windows AllJoyn API Denial of Service 7.5 0.0250 Exploitation Less Likely
High CVE-2024-20654 Windows ODBC Driver Remote Code Execution 8.0 0.0199 Exploitation Less Likely
High CVE-2024-20682 Windows Cryptographic Services Remote Code Execution 7.8 0.0076 Exploitation Less Likely
High CVE-2024-21309 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0076 Exploitation Less Likely
High CVE-2024-20658 Microsoft Virtual Hard Drive Elevation of Privilege 7.8 0.0071 Exploitation Less Likely
High CVE-2024-20681 Windows Subsystem for Linux Elevation of Privilege 7.8 0.0070 Exploitation Less Likely
High CVE-2024-20657 Windows Group Policy Elevation of Privilege 7.0 0.0057 Exploitation Less Likely
Routine CVE-2024-21306 Microsoft Bluetooth Driver Spoofing 5.7 0.0583 Exploitation Less Likely
Routine CVE-2024-20666 Windows BitLocker Security Feature Bypass 6.6 0.0310 Exploitation Less Likely
Routine CVE-2024-21314 Windows Message Queuing Information Disclosure 6.5 0.0208 Exploitation Less Likely
Routine CVE-2024-20660 Windows Message Queuing Information Disclosure 6.5 0.0204 Exploitation Less Likely
Routine CVE-2024-20680 Windows Message Queuing Information Disclosure 6.5 0.0204 Exploitation Less Likely
Routine CVE-2024-20664 Windows Message Queuing Information Disclosure 6.5 0.0200 Exploitation Less Likely
Routine CVE-2024-20663 Windows Message Queuing Information Disclosure 6.5 0.0193 Exploitation Less Likely
Showing 1 to 25 of 35 1Next