Microsoft · Security update · September 10, 2024

KB5042881: September 2024 cumulative update for Windows Server 2022

KB5042881, released September 10, 2024, fixes 40 CVEs across 2 products. 3 of them are being exploited (CVE-2024-43461); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEV2 publicly disclosed
CVEs closed
40
3 rated Critical
Exploited
3
CVE-2024-43461
Exploitation more likely
12
Vendor assessment
Highest EPSS
0.7056
99th percentile

Priority of the 40 CVEs

Patch now 3 Urgent 14 High 17 Routine 6

Applies to

ProductBuild after install
Windows Server 202220348.2700
Windows Server 2022 (Server Core installation)20348.2700

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-43461 Windows MSHTML Platform Spoofing 8.8 0.5449 KEVDisclosedExploited
Patch now CVE-2024-38217 Windows Mark of the Web (MOTW) Security Feature Bypass 5.4 0.1003 KEVDisclosedExploited
Patch now CVE-2024-38014 Windows Installer Elevation of Privilege 7.8 0.0626 KEVExploited
Urgent CVE-2024-38063 Windows TCP/IP Remote Code Execution 9.8 0.7056 More likely
Urgent CVE-2024-38244 Microsoft Streaming Service Elevation of Privilege 7.8 0.0619 More likely
Urgent CVE-2024-38241 Microsoft Streaming Service Elevation of Privilege 7.8 0.0602 More likely
Urgent CVE-2020-17042 Microsoft Windows Remote Code Execution 8.8 0.0511 Exploitation Less Likely
Urgent CVE-2024-38237 Microsoft Streaming Service Elevation of Privilege 7.8 0.0341 More likely
Urgent CVE-2024-38242 Microsoft Streaming Service Elevation of Privilege 7.8 0.0335 More likely
Urgent CVE-2024-38249 Microsoft Graphics Component Elevation of Privilege 7.8 0.0095 More likely
Urgent CVE-2024-38245 Microsoft Streaming Service Elevation of Privilege 7.8 0.0087 More likely
Urgent CVE-2024-38238 Microsoft Streaming Service Elevation of Privilege 7.8 0.0077 More likely
Urgent CVE-2024-38243 Microsoft Streaming Service Elevation of Privilege 7.8 0.0076 More likely
Urgent CVE-2024-38119 Windows Network Address Translation (NAT) Remote Code Execution 7.5 0.0076 Exploitation Less Likely
Urgent CVE-2024-38247 Microsoft Graphics Component Elevation of Privilege 7.8 0.0070 More likely
Urgent CVE-2024-38252 Windows Win32K - ICOMP Elevation of Privilege 7.8 0.0060 More likely
Urgent CVE-2024-38246 Windows Win32K - GRFX Elevation of Privilege 7.0 0.0057 More likely
High CVE-2024-43454 Windows Remote Desktop Licensing Service Remote Code Execution 7.1 0.2188 Exploitation Less Likely
High CVE-2024-38257 Windows AllJoyn API Information Disclosure 7.5 0.0447 Exploitation Less Likely
High CVE-2024-38236 Windows DHCP Server Denial of Service 7.5 0.0230 Exploitation Less Likely
High CVE-2024-38259 Microsoft Management Console Remote Code Execution 8.8 0.0189 Exploitation Less Likely
High CVE-2024-38239 Windows Kerberos Elevation of Privilege 7.2 0.0175 Exploitation Less Likely
High CVE-2024-43455 Windows Remote Desktop Licensing Service Spoofing 8.8 0.0166 Exploitation Less Likely
High CVE-2024-38138 Windows Deployment Services Remote Code Execution 7.5 0.0166 Exploitation Less Likely
High CVE-2024-38260 Windows Remote Desktop Licensing Service Remote Code Execution 8.8 0.0162 Exploitation Less Likely
Showing 1 to 25 of 40 1Next