Microsoft · ServicingStack update · October 8, 2024

KB5044280: October 2024 cumulative update for Windows 11 22H2

KB5044280, released October 8, 2024, fixes 63 CVEs across 2 products. 2 of them are being exploited (CVE-2024-43572); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEV6 publicly disclosedUnsupported product
CVEs closed
63
1 rated Critical
Exploited
2
CVE-2024-43572
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.6670
99th percentile

Priority of the 63 CVEs

Patch now 2 Urgent 7 High 28 Routine 26

Applies to

ProductBuild after install
Windows 11 version 21H2 for ARM64-based Systems22000.3260
Windows 11 version 21H2 for x64-based Systems22000.3260

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-43572 Microsoft Management Console Remote Code Execution 7.8 0.6670 KEVDisclosedExploited
Patch now CVE-2024-43573 Windows MSHTML Platform Spoofing 6.5 0.4611 KEVDisclosedExploited
Urgent CVE-2024-43560 Windows Storage Port Driver Elevation of Privilege 7.8 0.0357 More likely
Urgent CVE-2024-43582 Windows Remote Desktop Remote Code Execution 8.1 0.0316 Exploitation Less Likely
Urgent CVE-2024-43581 OpenSSH for Windows Remote Code Execution 7.1 0.0140 More likely
Urgent CVE-2024-43583 Winlogon Elevation of Privilege 7.8 0.0134 DisclosedMore likely
Urgent CVE-2024-43615 OpenSSH for Windows Remote Code Execution 7.1 0.0124 More likely
Urgent CVE-2024-43556 Microsoft Graphics Component Elevation of Privilege 7.8 0.0072 More likely
Urgent CVE-2024-43509 Microsoft Graphics Component Elevation of Privilege 7.8 0.0064 More likely
High CVE-2024-43532 RPC Endpoint Mapper Service Elevation of Privilege 8.8 0.1197 Exploitation Less Likely
High CVE-2024-6197 Windows cURL Implementation Remote Code Execution 8.8 0.0430 DisclosedExploitation Less Likely
High CVE-2024-43506 BranchCache Denial of Service 7.5 0.0230 Exploitation Less Likely
High CVE-2024-43515 Internet Small Computer Systems Interface (iSCSI) Denial of Service 7.5 0.0226 Exploitation Less Likely
High CVE-2024-43562 Windows Network Address Translation (NAT) Denial of Service 7.5 0.0222 Exploitation Less Likely
High CVE-2024-43565 Windows Network Address Translation (NAT) Denial of Service 7.5 0.0222 Exploitation Less Likely
High CVE-2024-38149 BranchCache Denial of Service 7.5 0.0221 Exploitation Less Likely
High CVE-2024-38202 Windows Update Stack Elevation of Privilege 7.3 0.0168 DisclosedExploitation Less Likely
High CVE-2024-43533 Remote Desktop Client Remote Code Execution 8.8 0.0159 Exploitation Less Likely
High CVE-2024-43519 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0150 Exploitation Less Likely
High CVE-2024-43599 Remote Desktop Client Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2024-43517 Microsoft ActiveX Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2024-43574 Microsoft Windows Speech Remote Code Execution 8.3 0.0117 Exploitation Less Likely
High CVE-2024-43550 Windows Secure Channel Spoofing 7.4 0.0109 Exploitation Less Likely
High CVE-2024-43518 Windows Telephony Server Remote Code Execution 8.8 0.0099 Exploitation Less Likely
High CVE-2024-20659 Role: Windows Hyper-V Security Feature Bypass 7.1 0.0094 DisclosedExploitation Less Likely
Showing 1 to 25 of 63 1Next