Microsoft · Security update · April 9, 2024

KB5036922: April 2024 security update

KB5036922, released April 9, 2024, fixes 32 CVEs across 2 products. One of them is being exploited (CVE-2024-26234). Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 publicly disclosedUnsupported product
CVEs closed
32
None rated Critical
Exploited
1
CVE-2024-26234
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.6258
99th percentile

Priority of the 32 CVEs

Patch now 1 Urgent 5 High 21 Routine 5

Applies to

Product
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-26234 Windows Proxy Driver Spoofing 6.7 0.0485 DisclosedExploited
Urgent CVE-2024-26212 Windows DHCP Server Denial of Service 7.5 0.6258 More likely
Urgent CVE-2024-26230 Windows Remote Access Connection Manager Elevation of Privilege 7.8 0.2411 More likely
Urgent CVE-2024-26158 Microsoft Install Service Elevation of Privilege 7.8 0.1226 More likely
Urgent CVE-2024-29056 Windows Authentication Methods Elevation of Privilege 4.3 0.0101 More likely
Urgent CVE-2024-26241 Windows Win32K - ICOMP Elevation of Privilege 7.8 0.0073 More likely
High CVE-2024-26229 Windows Kernel Elevation of Privilege 7.8 0.0938 Exploitation Less Likely
High CVE-2024-26215 Windows DHCP Server Denial of Service 7.5 0.0267 Exploitation Less Likely
High CVE-2024-20678 Windows Remote Procedure Call Remote Code Execution 8.8 0.0252 Exploitation Less Likely
High CVE-2024-26208 Windows Message Queuing Remote Code Execution 7.2 0.0228 Exploitation Less Likely
High CVE-2024-26195 Windows DHCP Server Remote Code Execution 7.2 0.0222 Exploitation Less Likely
High CVE-2024-26214 Microsoft WDAC ODBC Driver Remote Code Execution 8.8 0.0202 Exploitation Less Likely
High CVE-2024-26210 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0196 Exploitation Less Likely
High CVE-2024-26244 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0196 Exploitation Less Likely
High CVE-2024-26179 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0181 Exploitation Less Likely
High CVE-2024-26200 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0181 Exploitation Less Likely
High CVE-2024-26205 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0181 Exploitation Less Likely
High CVE-2024-29066 Windows Distributed File System (DFS) Remote Code Execution 7.2 0.0134 Exploitation Less Likely
High CVE-2024-29050 Windows Cryptographic Services Remote Code Execution 8.4 0.0125 Exploitation Less Likely
High CVE-2024-28925 Windows Secure Boot Security Feature Bypass 8.0 0.0123 Exploitation Less Likely
High CVE-2024-26240 Windows Secure Boot Security Feature Bypass 8.0 0.0106 Exploitation Less Likely
High CVE-2024-26248 Windows Kerberos Elevation of Privilege 7.5 0.0103 Exploitation Less Likely
High CVE-2024-26232 Windows Message Queuing Remote Code Execution 7.3 0.0093 Exploitation Less Likely
High CVE-2024-26216 Windows File Server Resource Management Service Elevation of Privilege 7.3 0.0087 Exploitation Less Likely
High CVE-2024-26228 Windows Cryptographic Services Security Feature Bypass 7.8 0.0040 Exploitation Less Likely
Showing 1 to 25 of 32 1Next