Microsoft · Security update · February 13, 2024

KB5034795: February 2024 security update

KB5034795, released February 13, 2024, fixes 25 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
25
1 rated Critical
Exploited
0
None reported
Exploitation more likely
1
Microsoft's assessment
Highest EPSS
0.2690
98th percentile

Priority of the 25 CVEs

Patch now 0 Urgent 1 High 22 Routine 2

Applies to

Product
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2024-21357 Windows Internet Connection Sharing (ICS)Remote Code Execution8.1 0.2690 More likely
High CVE-2024-21372 Windows OLERemote Code Execution8.8 0.0181 Exploitation Less Likely
High CVE-2024-21358 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0177 Exploitation Less Likely
High CVE-2024-21360 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0177 Exploitation Less Likely
High CVE-2024-21365 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0177 Exploitation Less Likely
High CVE-2024-21366 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0177 Exploitation Less Likely
High CVE-2024-21370 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0177 Exploitation Less Likely
High CVE-2024-21420 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0173 Exploitation Less Likely
High CVE-2024-21375 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0165 Exploitation Less Likely
High CVE-2024-21349 Microsoft ActiveXRemote Code Execution8.8 0.0164 Exploitation Less Likely
High CVE-2024-21359 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0164 Exploitation Less Likely
High CVE-2024-21361 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0164 Exploitation Less Likely
High CVE-2024-21367 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0164 Exploitation Less Likely
High CVE-2024-21368 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0164 Exploitation Less Likely
High CVE-2024-21352 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0163 Exploitation Less Likely
High CVE-2024-21391 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0163 Exploitation Less Likely
High CVE-2024-21369 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0155 Exploitation Less Likely
High CVE-2024-21350 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0148 Exploitation Less Likely
High CVE-2024-21347 SQL ServerRemote Code Execution7.5 0.0137 Exploitation Less Likely
High CVE-2024-21363 Windows Message QueuingRemote Code Execution7.8 0.0080 Exploitation Less Likely
High CVE-2024-21354 Windows Message QueuingElevation of Privilege7.8 0.0061 Exploitation Less Likely
High CVE-2024-21405 Windows Message QueuingElevation of Privilege7.0 0.0038 Exploitation Less Likely
High CVE-2024-21355 Windows Message QueuingElevation of Privilege7.0 0.0032 Exploitation Less Likely
Routine CVE-2024-21356 Windows LDAP - Lightweight Directory Access ProtocolDenial of Service6.5 0.0208 Exploitation Less Likely
Routine CVE-2024-21340 Windows KernelInformation Disclosure4.6 0.0075 Exploitation Less Likely
Showing 1 to 25 of 25 1

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.