Microsoft · Security update · September 10, 2024

KB5043064: September 2024 cumulative update for Windows 10 21H2

KB5043064, released September 10, 2024, fixes 29 CVEs across 6 products. 3 of them are being exploited (CVE-2024-43461); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEV2 publicly disclosed
CVEs closed
29
1 rated Critical
Exploited
3
CVE-2024-43461
Exploitation more likely
12
Vendor assessment
Highest EPSS
0.5449
99th percentile

Priority of the 29 CVEs

Patch now 3 Urgent 13 High 9 Routine 4

Applies to

Product
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-43461 Windows MSHTML Platform Spoofing 8.8 0.5449 KEVDisclosedExploited
Patch now CVE-2024-38217 Windows Mark of the Web (MOTW) Security Feature Bypass 5.4 0.1003 KEVDisclosedExploited
Patch now CVE-2024-38014 Windows Installer Elevation of Privilege 7.8 0.0626 KEVExploited
Urgent CVE-2024-38244 Microsoft Streaming Service Elevation of Privilege 7.8 0.0619 More likely
Urgent CVE-2024-38241 Microsoft Streaming Service Elevation of Privilege 7.8 0.0602 More likely
Urgent CVE-2024-38237 Microsoft Streaming Service Elevation of Privilege 7.8 0.0341 More likely
Urgent CVE-2024-38242 Microsoft Streaming Service Elevation of Privilege 7.8 0.0335 More likely
Urgent CVE-2024-43487 Windows Mark of the Web (MOTW) Security Feature Bypass 6.5 0.0123 More likely
Urgent CVE-2024-38249 Microsoft Graphics Component Elevation of Privilege 7.8 0.0095 More likely
Urgent CVE-2024-38245 Microsoft Streaming Service Elevation of Privilege 7.8 0.0087 More likely
Urgent CVE-2024-38238 Microsoft Streaming Service Elevation of Privilege 7.8 0.0077 More likely
Urgent CVE-2024-38243 Microsoft Streaming Service Elevation of Privilege 7.8 0.0076 More likely
Urgent CVE-2024-38119 Windows Network Address Translation (NAT) Remote Code Execution 7.5 0.0076 Exploitation Less Likely
Urgent CVE-2024-38247 Microsoft Graphics Component Elevation of Privilege 7.8 0.0070 More likely
Urgent CVE-2024-38252 Windows Win32K - ICOMP Elevation of Privilege 7.8 0.0060 More likely
Urgent CVE-2024-38246 Windows Win32K - GRFX Elevation of Privilege 7.0 0.0057 More likely
High CVE-2024-38257 Windows AllJoyn API Information Disclosure 7.5 0.0447 Exploitation Less Likely
High CVE-2024-38239 Windows Kerberos Elevation of Privilege 7.2 0.0175 Exploitation Less Likely
High CVE-2024-38240 Windows Remote Access Connection Manager Elevation of Privilege 8.1 0.0149 Exploitation Less Likely
High CVE-2024-38045 Windows TCP/IP Remote Code Execution 8.1 0.0143 Exploitation Less Likely
High CVE-2024-21416 Windows TCP/IP Remote Code Execution 8.1 0.0138 Exploitation Less Likely
High CVE-2024-30073 Windows Security Zone Mapping Security Feature Bypass 7.8 0.0090 Exploitation Less Likely
High CVE-2024-38046 Windows PowerShell Elevation of Privilege 7.8 0.0070 Exploitation Less Likely
High CVE-2024-38250 Microsoft Graphics Component Elevation of Privilege 7.8 0.0069 Exploitation Less Likely
High CVE-2024-38248 Windows Storage Elevation of Privilege 7.0 0.0057 Exploitation Less Likely
Showing 1 to 25 of 29 1Next