Microsoft · Security update · September 10, 2024

KB5043138: September 2024 security update

KB5043138, released September 10, 2024, fixes 23 CVEs across 2 products. 3 of them are being exploited (CVE-2024-43461); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEV2 publicly disclosed
CVEs closed
23
None rated Critical
Exploited
3
CVE-2024-43461
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.5449
99th percentile

Priority of the 23 CVEs

Patch now 3 Urgent 4 High 11 Routine 5

Applies to

Product
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-43461 Windows MSHTML Platform Spoofing 8.8 0.5449 KEVDisclosedExploited
Patch now CVE-2024-38217 Windows Mark of the Web (MOTW) Security Feature Bypass 5.4 0.1003 KEVDisclosedExploited
Patch now CVE-2024-38014 Windows Installer Elevation of Privilege 7.8 0.0626 KEVExploited
Urgent CVE-2024-43487 Windows Mark of the Web (MOTW) Security Feature Bypass 6.5 0.0123 More likely
Urgent CVE-2024-38249 Microsoft Graphics Component Elevation of Privilege 7.8 0.0095 More likely
Urgent CVE-2024-38245 Microsoft Streaming Service Elevation of Privilege 7.8 0.0087 More likely
Urgent CVE-2024-38247 Microsoft Graphics Component Elevation of Privilege 7.8 0.0070 More likely
High CVE-2024-43454 Windows Remote Desktop Licensing Service Remote Code Execution 7.1 0.2188 Exploitation Less Likely
High CVE-2024-38236 Windows DHCP Server Denial of Service 7.5 0.0230 Exploitation Less Likely
High CVE-2024-38239 Windows Kerberos Elevation of Privilege 7.2 0.0175 Exploitation Less Likely
High CVE-2024-43455 Windows Remote Desktop Licensing Service Spoofing 8.8 0.0166 Exploitation Less Likely
High CVE-2024-38138 Windows Deployment Services Remote Code Execution 7.5 0.0166 Exploitation Less Likely
High CVE-2024-38260 Windows Remote Desktop Licensing Service Remote Code Execution 8.8 0.0162 Exploitation Less Likely
High CVE-2024-38240 Windows Remote Access Connection Manager Elevation of Privilege 8.1 0.0149 Exploitation Less Likely
High CVE-2024-38263 Windows Remote Desktop Licensing Service Remote Code Execution 7.5 0.0116 Exploitation Less Likely
High CVE-2024-43467 Windows Remote Desktop Licensing Service Remote Code Execution 7.5 0.0112 Exploitation Less Likely
High CVE-2024-30073 Windows Security Zone Mapping Security Feature Bypass 7.8 0.0090 Exploitation Less Likely
High CVE-2024-38250 Microsoft Graphics Component Elevation of Privilege 7.8 0.0069 Exploitation Less Likely
Routine CVE-2024-38258 Windows Remote Desktop Licensing Service Information Disclosure 6.5 0.0469 Exploitation Less Likely
Routine CVE-2024-38230 Windows Standards-Based Storage Management Service Denial of Service 6.5 0.0244 Exploitation Less Likely
Routine CVE-2024-38231 Windows Remote Desktop Licensing Service Denial of Service 6.5 0.0187 Exploitation Less Likely
Routine CVE-2024-38234 Windows Network Virtualization Denial of Service 6.5 0.0093 Exploitation Less Likely
Routine CVE-2024-38256 Windows Kernel-Mode Drivers Information Disclosure 5.5 0.0072 Exploitation Less Likely
Showing 1 to 23 of 23 1