Microsoft · Security update · August 13, 2024

KB5041851: August 2024 security update

KB5041851, released August 13, 2024, fixes 35 CVEs across 2 products. 2 of them are being exploited (CVE-2024-38193); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEV1 publicly disclosed
CVEs closed
35
4 rated Critical
Exploited
2
CVE-2024-38193
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.7056
99th percentile

Priority of the 35 CVEs

Patch now 2 Urgent 9 High 20 Routine 4

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-38193 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.2874 KEVExploited
Patch now CVE-2024-38107 Windows Power Dependency Coordinator Elevation of Privilege 7.8 0.0164 KEVExploited
Urgent CVE-2024-38063 Windows TCP/IP Remote Code Execution 9.8 0.7056 More likely
Urgent CVE-2024-38144 Microsoft Streaming Service Elevation of Privilege 8.8 0.3235 More likely
Urgent CVE-2024-38196 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0597 More likely
Urgent CVE-2024-38125 Microsoft Streaming Service Elevation of Privilege 7.8 0.0594 More likely
Urgent CVE-2023-40547 Windows Secure Boot Security Feature Bypass 8.3 0.0542 Exploitation Less Likely
Urgent CVE-2024-38140 Reliable Multicast Transport Driver (RMCAST) Remote Code Execution 9.8 0.0381 Exploitation Less Likely
Urgent CVE-2024-38141 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0372 More likely
Urgent CVE-2022-3775 Windows Secure Boot Remote Code Execution 8.2 0.0104 Exploitation Less Likely
Urgent CVE-2024-38198 Windows Print Spooler Components Elevation of Privilege 7.5 0.0079 More likely
High CVE-2024-38145 Windows Layer-2 Bridge Network Driver Denial of Service 7.5 0.0246 Exploitation Less Likely
High CVE-2024-38146 Windows Layer-2 Bridge Network Driver Denial of Service 7.5 0.0246 Exploitation Less Likely
High CVE-2024-38199 Line Printer Daemon Service (LPD) Remote Code Execution 9.8 0.0223 DisclosedExploitation Less Likely
High CVE-2024-38116 Windows IP Routing Management Snapin Remote Code Execution 8.8 0.0182 Exploitation Less Likely
High CVE-2024-38115 Windows IP Routing Management Snapin Remote Code Execution 8.8 0.0163 Exploitation Less Likely
High CVE-2024-38120 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0163 Exploitation Less Likely
High CVE-2024-38121 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0163 Exploitation Less Likely
High CVE-2024-38128 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0163 Exploitation Less Likely
High CVE-2024-38130 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0163 Exploitation Less Likely
High CVE-2024-38127 Windows Kernel Elevation of Privilege 7.8 0.0162 Exploitation Less Likely
High CVE-2024-38154 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0160 Exploitation Less Likely
High CVE-2024-38180 Windows SmartScreen Security Feature Bypass 8.8 0.0160 Exploitation Less Likely
High CVE-2024-38114 Windows IP Routing Management Snapin Remote Code Execution 8.8 0.0160 Exploitation Less Likely
High CVE-2024-29995 Windows Kerberos Elevation of Privilege 8.1 0.0146 Exploitation Less Likely
Showing 1 to 25 of 35 1Next