Microsoft · ServicingStack update · March 12, 2024

KB5035856: March 2024 cumulative update for Windows Server 23H2

KB5035856, released March 12, 2024, fixes 36 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.763). One of them is being exploited (CVE-2024-26169); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
36
2 rated Critical
Exploited
1
CVE-2024-26169
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.1626
96th percentile

Priority of the 36 CVEs

Patch now 1 Urgent 6 High 23 Routine 6

Applies to

ProductBuild after install
Windows Server 2022, 23H2 Edition (Server Core installation)25398.763

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-26169 Windows Error Reporting Elevation of Privilege 7.8 0.0401 KEVRansomwareExploited
Urgent CVE-2024-21407 Role: Windows Hyper-V Remote Code Execution 8.1 0.1626 Exploitation Less Likely
Urgent CVE-2024-26160 Windows Cloud Files Mini Filter Driver Information Disclosure 5.5 0.1137 More likely
Urgent CVE-2024-21437 Microsoft Graphics Component Elevation of Privilege 7.8 0.0803 More likely
Urgent CVE-2024-26170 Windows Composite Image File System Elevation of Privilege 7.8 0.0665 More likely
Urgent CVE-2024-21433 Windows Print Spooler Components Elevation of Privilege 7.0 0.0514 More likely
Urgent CVE-2024-21408 Role: Windows Hyper-V Denial of Service 5.5 0.0451 Exploitation Less Likely
High CVE-2024-26190 Microsoft QUIC Denial of Service 7.5 0.0299 Exploitation Less Likely
High CVE-2024-21438 Windows AllJoyn API Denial of Service 7.5 0.0272 Exploitation Less Likely
High CVE-2024-21440 Windows ODBC Driver Remote Code Execution 8.8 0.0203 Exploitation Less Likely
High CVE-2024-21450 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0203 Exploitation Less Likely
High CVE-2024-26166 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0203 Exploitation Less Likely
High CVE-2024-26162 Windows ODBC Driver Remote Code Execution 8.8 0.0202 Exploitation Less Likely
High CVE-2024-21441 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0195 Exploitation Less Likely
High CVE-2024-21444 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0195 Exploitation Less Likely
High CVE-2024-21451 Microsoft WDAC ODBC Driver Remote Code Execution 8.8 0.0195 Exploitation Less Likely
High CVE-2024-26159 Windows ODBC Driver Remote Code Execution 8.8 0.0195 Exploitation Less Likely
High CVE-2024-26161 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0195 Exploitation Less Likely
High CVE-2024-21443 Windows Kernel Elevation of Privilege 7.3 0.0129 Exploitation Less Likely
High CVE-2024-26173 Windows Kernel Elevation of Privilege 7.8 0.0089 Exploitation Less Likely
High CVE-2024-26178 Windows Kernel Elevation of Privilege 7.8 0.0089 Exploitation Less Likely
High CVE-2024-26176 Windows Kernel Elevation of Privilege 7.8 0.0083 Exploitation Less Likely
High CVE-2024-21434 Microsoft Windows SCSI Class System File Elevation of Privilege 7.8 0.0083 Exploitation Less Likely
High CVE-2024-21442 Windows USB Print Driver Elevation of Privilege 7.8 0.0083 Exploitation Less Likely
High CVE-2024-21436 Windows Installer Elevation of Privilege 7.8 0.0072 Exploitation Less Likely
Showing 1 to 25 of 36 1Next