Microsoft · Security update · February 13, 2024

KB5034830: February 2024 security update

KB5034830, released February 13, 2024, fixes 30 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
30
1 rated Critical
Exploited
0
None reported
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.9999
99th percentile

Priority of the 30 CVEs

Patch now 0 Urgent 2 High 26 Routine 2

Applies to

Product
Microsoft Defender for Endpoint for Windows on Windows Server 2012
Microsoft Defender for Endpoint for Windows on Windows Server 2012 (Server Core installation)
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2024-21357 Windows Internet Connection Sharing (ICS) Remote Code Execution 8.1 0.2690 More likely
Urgent CVE-2024-21371 Windows Kernel Elevation of Privilege 7.0 0.1088 More likely
High CVE-2023-50387 Role: DNS Server Denial of Service 7.5 0.9999 Exploitation Less Likely
High CVE-2024-21348 Windows Internet Connection Sharing (ICS) Denial of Service 7.5 0.0218 Exploitation Less Likely
High CVE-2024-21372 Windows OLE Remote Code Execution 8.8 0.0181 Exploitation Less Likely
High CVE-2024-21358 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0177 Exploitation Less Likely
High CVE-2024-21360 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0177 Exploitation Less Likely
High CVE-2024-21365 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0177 Exploitation Less Likely
High CVE-2024-21366 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0177 Exploitation Less Likely
High CVE-2024-21370 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0177 Exploitation Less Likely
High CVE-2024-21420 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0173 Exploitation Less Likely
High CVE-2024-21375 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0165 Exploitation Less Likely
High CVE-2024-21349 Microsoft ActiveX Remote Code Execution 8.8 0.0164 Exploitation Less Likely
High CVE-2024-21359 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0164 Exploitation Less Likely
High CVE-2024-21361 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0164 Exploitation Less Likely
High CVE-2024-21367 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0164 Exploitation Less Likely
High CVE-2024-21368 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0164 Exploitation Less Likely
High CVE-2024-21352 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0163 Exploitation Less Likely
High CVE-2024-21391 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0163 Exploitation Less Likely
High CVE-2024-21369 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0155 Exploitation Less Likely
High CVE-2024-21350 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0148 Exploitation Less Likely
High CVE-2024-21347 SQL Server Remote Code Execution 7.5 0.0137 Exploitation Less Likely
High CVE-2024-21406 Microsoft Windows Spoofing 7.5 0.0086 Exploitation Less Likely
High CVE-2024-21363 Windows Message Queuing Remote Code Execution 7.8 0.0080 Exploitation Less Likely
High CVE-2024-21315 Microsoft Defender for Endpoint Elevation of Privilege 7.8 0.0064 Exploitation Less Likely
Showing 1 to 25 of 30 1Next