Microsoft · Security update · August 13, 2024
KB5041578: August 2024 cumulative update for Windows 10 1809
KB5041578, released August 13, 2024, fixes 46 CVEs across 4 products. 4 of them are being exploited (CVE-2024-38178); 4 on CISA KEV. Patch Radar priority: Patch now.
Patch now4 on CISA KEV1 publicly disclosed
CVEs closed
46
3 rated Critical
Exploited
4
CVE-2024-38178
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.4138
98th percentile
Priority of the 46 CVEs
Patch now 4
Urgent 9
High 26
Routine 7
Applies to
| Product | Build after install |
|---|---|
| Windows 10 Version 1809 for 32-bit Systems | 17763.6189 |
| Windows 10 Version 1809 for x64-based Systems | 17763.6189 |
| Windows Server 2019 | 17763.6189 |
| Windows Server 2019 (Server Core installation) | 17763.6189 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2024-38178 | Windows Scripting | Remote Code Execution | 7.5 | 0.4138 | KEVExploited |
| Patch now | CVE-2024-38193 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.8 | 0.2874 | KEVExploited |
| Patch now | CVE-2024-38106 | Windows Kernel | Elevation of Privilege | 7.0 | 0.0634 | KEVExploited |
| Patch now | CVE-2024-38107 | Windows Power Dependency Coordinator | Elevation of Privilege | 7.8 | 0.0164 | KEVExploited |
| Urgent | CVE-2024-38144 | Microsoft Streaming Service | Elevation of Privilege | 8.8 | 0.3235 | More likely |
| Urgent | CVE-2024-38196 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0597 | More likely |
| Urgent | CVE-2024-38125 | Microsoft Streaming Service | Elevation of Privilege | 7.8 | 0.0594 | More likely |
| Urgent | CVE-2023-40547 | Windows Secure Boot | Security Feature Bypass | 8.3 | 0.0542 | Exploitation Less Likely |
| Urgent | CVE-2024-38140 | Reliable Multicast Transport Driver (RMCAST) | Remote Code Execution | 9.8 | 0.0381 | Exploitation Less Likely |
| Urgent | CVE-2024-38141 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.8 | 0.0372 | More likely |
| Urgent | CVE-2022-3775 | Windows Secure Boot | Remote Code Execution | 8.2 | 0.0104 | Exploitation Less Likely |
| Urgent | CVE-2024-38198 | Windows Print Spooler Components | Elevation of Privilege | 7.5 | 0.0079 | More likely |
| Urgent | CVE-2024-38133 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0073 | More likely |
| High | CVE-2024-38126 | Windows Network Address Translation (NAT) | Denial of Service | 7.5 | 0.0266 | Exploitation Less Likely |
| High | CVE-2024-38132 | Windows Network Address Translation (NAT) | Denial of Service | 7.5 | 0.0250 | Exploitation Less Likely |
| High | CVE-2024-38145 | Windows Layer-2 Bridge Network Driver | Denial of Service | 7.5 | 0.0246 | Exploitation Less Likely |
| High | CVE-2024-38146 | Windows Layer-2 Bridge Network Driver | Denial of Service | 7.5 | 0.0246 | Exploitation Less Likely |
| High | CVE-2024-38199 | Line Printer Daemon Service (LPD) | Remote Code Execution | 9.8 | 0.0223 | DisclosedExploitation Less Likely |
| High | CVE-2024-38116 | Windows IP Routing Management Snapin | Remote Code Execution | 8.8 | 0.0182 | Exploitation Less Likely |
| High | CVE-2024-38115 | Windows IP Routing Management Snapin | Remote Code Execution | 8.8 | 0.0163 | Exploitation Less Likely |
| High | CVE-2024-38120 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0163 | Exploitation Less Likely |
| High | CVE-2024-38121 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0163 | Exploitation Less Likely |
| High | CVE-2024-38128 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0163 | Exploitation Less Likely |
| High | CVE-2024-38130 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0163 | Exploitation Less Likely |
| High | CVE-2024-38127 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0162 | Exploitation Less Likely |
Showing 1 to 25 of 46
1Next