Microsoft · Security update · September 10, 2024

KB5043051: September 2024 cumulative update for Windows 10 1607

KB5043051, released September 10, 2024, fixes 38 CVEs across 4 products. 3 of them are being exploited (CVE-2024-43461); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEV2 publicly disclosed
CVEs closed
38
1 rated Critical
Exploited
3
CVE-2024-43461
Exploitation more likely
11
Vendor assessment
Highest EPSS
0.5449
99th percentile

Priority of the 38 CVEs

Patch now 3 Urgent 12 High 16 Routine 7

Applies to

ProductBuild after install
Windows 10 Version 1607 for 32-bit Systems14393.7336
Windows 10 Version 1607 for x64-based Systems14393.7336
Windows Server 201614393.7336
Windows Server 2016 (Server Core installation)14393.7336

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-43461 Windows MSHTML Platform Spoofing 8.8 0.5449 KEVDisclosedExploited
Patch now CVE-2024-38217 Windows Mark of the Web (MOTW) Security Feature Bypass 5.4 0.1003 KEVDisclosedExploited
Patch now CVE-2024-38014 Windows Installer Elevation of Privilege 7.8 0.0626 KEVExploited
Urgent CVE-2024-38244 Microsoft Streaming Service Elevation of Privilege 7.8 0.0619 More likely
Urgent CVE-2024-38241 Microsoft Streaming Service Elevation of Privilege 7.8 0.0602 More likely
Urgent CVE-2024-38237 Microsoft Streaming Service Elevation of Privilege 7.8 0.0341 More likely
Urgent CVE-2024-38242 Microsoft Streaming Service Elevation of Privilege 7.8 0.0335 More likely
Urgent CVE-2024-43487 Windows Mark of the Web (MOTW) Security Feature Bypass 6.5 0.0123 More likely
Urgent CVE-2024-38249 Microsoft Graphics Component Elevation of Privilege 7.8 0.0095 More likely
Urgent CVE-2024-38245 Microsoft Streaming Service Elevation of Privilege 7.8 0.0087 More likely
Urgent CVE-2024-38238 Microsoft Streaming Service Elevation of Privilege 7.8 0.0077 More likely
Urgent CVE-2024-38243 Microsoft Streaming Service Elevation of Privilege 7.8 0.0076 More likely
Urgent CVE-2024-38119 Windows Network Address Translation (NAT) Remote Code Execution 7.5 0.0076 Exploitation Less Likely
Urgent CVE-2024-38247 Microsoft Graphics Component Elevation of Privilege 7.8 0.0070 More likely
Urgent CVE-2024-38252 Windows Win32K - ICOMP Elevation of Privilege 7.8 0.0060 More likely
High CVE-2024-43454 Windows Remote Desktop Licensing Service Remote Code Execution 7.1 0.2188 Exploitation Less Likely
High CVE-2024-38257 Windows AllJoyn API Information Disclosure 7.5 0.0447 Exploitation Less Likely
High CVE-2024-38233 Windows Network Virtualization Denial of Service 7.5 0.0245 Exploitation Less Likely
High CVE-2024-38232 Windows Network Virtualization Denial of Service 7.5 0.0231 Exploitation Less Likely
High CVE-2024-38236 Windows DHCP Server Denial of Service 7.5 0.0230 Exploitation Less Likely
High CVE-2024-43458 Windows Network Virtualization Information Disclosure 7.7 0.0178 Exploitation Less Likely
High CVE-2024-38239 Windows Kerberos Elevation of Privilege 7.2 0.0175 Exploitation Less Likely
High CVE-2024-43455 Windows Remote Desktop Licensing Service Spoofing 8.8 0.0166 Exploitation Less Likely
High CVE-2024-38138 Windows Deployment Services Remote Code Execution 7.5 0.0166 Exploitation Less Likely
High CVE-2024-38260 Windows Remote Desktop Licensing Service Remote Code Execution 8.8 0.0162 Exploitation Less Likely
Showing 1 to 25 of 38 1Next