Microsoft · Security update · August 13, 2024

KB5041838: August 2024 security update

KB5041838, released August 13, 2024, fixes 29 CVEs across 2 products. One of them is being exploited (CVE-2024-38193); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
29
2 rated Critical
Exploited
1
CVE-2024-38193
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.7056
99th percentile

Priority of the 29 CVEs

Patch now 1 Urgent 6 High 18 Routine 4

Applies to

Product
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-38193 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.2874 KEVExploited
Urgent CVE-2024-38063 Windows TCP/IP Remote Code Execution 9.8 0.7056 More likely
Urgent CVE-2024-38144 Microsoft Streaming Service Elevation of Privilege 8.8 0.3235 More likely
Urgent CVE-2024-38196 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0597 More likely
Urgent CVE-2024-38125 Microsoft Streaming Service Elevation of Privilege 7.8 0.0594 More likely
Urgent CVE-2024-38140 Reliable Multicast Transport Driver (RMCAST) Remote Code Execution 9.8 0.0381 Exploitation Less Likely
Urgent CVE-2024-38198 Windows Print Spooler Components Elevation of Privilege 7.5 0.0079 More likely
High CVE-2024-38199 Line Printer Daemon Service (LPD) Remote Code Execution 9.8 0.0223 DisclosedExploitation Less Likely
High CVE-2024-38116 Windows IP Routing Management Snapin Remote Code Execution 8.8 0.0182 Exploitation Less Likely
High CVE-2024-38115 Windows IP Routing Management Snapin Remote Code Execution 8.8 0.0163 Exploitation Less Likely
High CVE-2024-38120 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0163 Exploitation Less Likely
High CVE-2024-38121 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0163 Exploitation Less Likely
High CVE-2024-38128 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0163 Exploitation Less Likely
High CVE-2024-38130 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0163 Exploitation Less Likely
High CVE-2024-38127 Windows Kernel Elevation of Privilege 7.8 0.0162 Exploitation Less Likely
High CVE-2024-38154 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0160 Exploitation Less Likely
High CVE-2024-38180 Windows SmartScreen Security Feature Bypass 8.8 0.0160 Exploitation Less Likely
High CVE-2024-38114 Windows IP Routing Management Snapin Remote Code Execution 8.8 0.0160 Exploitation Less Likely
High CVE-2024-29995 Windows Kerberos Elevation of Privilege 8.1 0.0146 Exploitation Less Likely
High CVE-2024-38131 Windows Clipboard Virtual Channel Extension Remote Code Execution 8.8 0.0132 Exploitation Less Likely
High CVE-2024-37968 Microsoft Windows DNS Spoofing 7.5 0.0104 Exploitation Less Likely
High CVE-2024-38152 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 7.8 0.0088 Exploitation Less Likely
High CVE-2024-38117 Windows NTFS Elevation of Privilege 7.8 0.0069 Exploitation Less Likely
High CVE-2024-38134 Microsoft Streaming Service Elevation of Privilege 7.8 0.0068 Exploitation Less Likely
High CVE-2024-38153 Windows Kernel Elevation of Privilege 7.8 0.0051 Exploitation Less Likely
Showing 1 to 25 of 29 1Next