Microsoft · ServicingStack update · April 9, 2024

KB5036910: April 2024 cumulative update for Windows Server 23H2

KB5036910, released April 9, 2024, fixes 83 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.830). 2 of them are being exploited (CVE-2024-29988); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
83
None rated Critical
Exploited
2
CVE-2024-29988
Exploitation more likely
10
Vendor assessment
Highest EPSS
0.8790
99th percentile

Priority of the 83 CVEs

Patch now 2 Urgent 10 High 50 Routine 21

Applies to

ProductBuild after install
Windows Server 2022, 23H2 Edition (Server Core installation)25398.830

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-29988 Internet Shortcut Files Security Feature Bypass 8.8 0.4515 KEVExploited
Patch now CVE-2024-26234 Windows Proxy Driver Spoofing 6.7 0.0485 DisclosedExploited
Urgent CVE-2024-26256 Windows Compressed Folder Remote Code Execution 7.8 0.8790 More likely
Urgent CVE-2024-26212 Windows DHCP Server Denial of Service 7.5 0.6258 More likely
Urgent CVE-2024-26230 Windows Remote Access Connection Manager Elevation of Privilege 7.8 0.2411 More likely
Urgent CVE-2024-26209 Windows Local Security Authority Subsystem Service (LSASS) Information Disclosure 5.5 0.1481 More likely
Urgent CVE-2024-26218 Windows Kernel Elevation of Privilege 7.8 0.1292 More likely
Urgent CVE-2024-26158 Microsoft Install Service Elevation of Privilege 7.8 0.1226 More likely
Urgent CVE-2024-29056 Windows Authentication Methods Elevation of Privilege 4.3 0.0101 More likely
Urgent CVE-2024-28921 Windows Secure Boot Security Feature Bypass 6.7 0.0073 More likely
Urgent CVE-2024-28903 Windows Secure Boot Security Feature Bypass 6.7 0.0073 More likely
Urgent CVE-2024-26239 Windows Remote Access Connection Manager Elevation of Privilege 7.8 0.0058 More likely
High CVE-2024-26229 Windows Kernel Elevation of Privilege 7.8 0.0938 Exploitation Less Likely
High CVE-2024-26219 Windows HTTP.sys Denial of Service 7.5 0.0314 Exploitation Less Likely
High CVE-2024-26254 Windows Virtual Machine Bus Denial of Service 7.5 0.0314 Exploitation Less Likely
High CVE-2024-26215 Windows DHCP Server Denial of Service 7.5 0.0267 Exploitation Less Likely
High CVE-2024-20678 Windows Remote Procedure Call Remote Code Execution 8.8 0.0252 Exploitation Less Likely
High CVE-2024-26208 Windows Message Queuing Remote Code Execution 7.2 0.0228 Exploitation Less Likely
High CVE-2024-26195 Windows DHCP Server Remote Code Execution 7.2 0.0222 Exploitation Less Likely
High CVE-2024-26202 Windows DHCP Server Remote Code Execution 7.2 0.0222 Exploitation Less Likely
High CVE-2024-26214 Microsoft WDAC ODBC Driver Remote Code Execution 8.8 0.0202 Exploitation Less Likely
High CVE-2024-26210 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0196 Exploitation Less Likely
High CVE-2024-26244 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0196 Exploitation Less Likely
High CVE-2024-26221 Role: DNS Server Remote Code Execution 7.2 0.0182 Exploitation Less Likely
High CVE-2024-26179 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0181 Exploitation Less Likely
Showing 1 to 25 of 83 1Next