Microsoft · Security update · January 9, 2024

KB5034184: January 2024 security update

KB5034184, released January 9, 2024, fixes 22 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
22
1 rated Critical
Exploited
0
None reported
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.2260
97th percentile

Priority of the 22 CVEs

Patch now 0 Urgent 5 High 5 Routine 12

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2024-20674 Windows Authentication Methods Security Feature Bypass 8.8 0.1717 More likely
Urgent CVE-2024-20653 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0449 More likely
Urgent CVE-2024-20683 Windows Win32K Elevation of Privilege 7.8 0.0421 More likely
Urgent CVE-2024-20652 Windows Scripting Security Feature Bypass 8.1 0.0208 More likely
Urgent CVE-2024-21307 Remote Desktop Client Remote Code Execution 7.5 0.0196 More likely
High CVE-2024-20661 Windows Message Queuing Denial of Service 7.5 0.0276 Exploitation Less Likely
High CVE-2024-20654 Windows ODBC Driver Remote Code Execution 8.0 0.0199 Exploitation Less Likely
High CVE-2024-20682 Windows Cryptographic Services Remote Code Execution 7.8 0.0076 Exploitation Less Likely
High CVE-2024-20658 Microsoft Virtual Hard Drive Elevation of Privilege 7.8 0.0071 Exploitation Less Likely
High CVE-2024-20657 Windows Group Policy Elevation of Privilege 7.0 0.0057 Exploitation Less Likely
Routine CVE-2024-21320 Windows Themes Spoofing 6.5 0.2260 Exploitation Less Likely
Routine CVE-2024-21314 Windows Message Queuing Information Disclosure 6.5 0.0208 Exploitation Less Likely
Routine CVE-2024-20660 Windows Message Queuing Information Disclosure 6.5 0.0204 Exploitation Less Likely
Routine CVE-2024-20680 Windows Message Queuing Information Disclosure 6.5 0.0204 Exploitation Less Likely
Routine CVE-2024-20664 Windows Message Queuing Information Disclosure 6.5 0.0200 Exploitation Less Likely
Routine CVE-2024-20663 Windows Message Queuing Information Disclosure 6.5 0.0193 Exploitation Less Likely
Routine CVE-2024-20662 Windows Online Certificate Status Protocol (OCSP) SnapIn Information Disclosure 4.9 0.0192 Exploitation Less Likely
Routine CVE-2024-21313 Windows TCP/IP Information Disclosure 5.3 0.0150 Exploitation Less Likely
Routine CVE-2024-20655 Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution 6.6 0.0141 Exploitation Less Likely
Routine CVE-2024-20692 Windows Local Security Authority Subsystem Service (LSASS) Information Disclosure 5.7 0.0118 Exploitation Less Likely
Routine CVE-2024-21311 Windows Cryptographic Services Information Disclosure 5.5 0.0078 Exploitation Less Likely
Routine CVE-2024-20691 Windows Themes Information Disclosure 4.7 0.0059 Exploitation Less Likely
Showing 1 to 22 of 22 1