Microsoft · ServicingStack update · October 8, 2024

KB5044284: October 2024 cumulative update for Windows Server 23H2

KB5044284, released October 8, 2024, fixes 64 CVEs across 2 products. 2 of them are being exploited (CVE-2024-43572); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEV4 publicly disclosed
CVEs closed
64
1 rated Critical
Exploited
2
CVE-2024-43572
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.6670
99th percentile

Priority of the 64 CVEs

Patch now 2 Urgent 6 High 26 Routine 30

Applies to

ProductBuild after install
Windows 11 Version 24H2 for ARM64-based Systems26100.2033
Windows 11 Version 24H2 for x64-based Systems26100.2033

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-43572 Microsoft Management Console Remote Code Execution 7.8 0.6670 KEVDisclosedExploited
Patch now CVE-2024-43573 Windows MSHTML Platform Spoofing 6.5 0.4611 KEVDisclosedExploited
Urgent CVE-2024-43560 Windows Storage Port Driver Elevation of Privilege 7.8 0.0357 More likely
Urgent CVE-2024-43582 Windows Remote Desktop Remote Code Execution 8.1 0.0316 Exploitation Less Likely
Urgent CVE-2024-43581 OpenSSH for Windows Remote Code Execution 7.1 0.0140 More likely
Urgent CVE-2024-43615 OpenSSH for Windows Remote Code Execution 7.1 0.0124 More likely
Urgent CVE-2024-43556 Microsoft Graphics Component Elevation of Privilege 7.8 0.0072 More likely
Urgent CVE-2024-43509 Microsoft Graphics Component Elevation of Privilege 7.8 0.0064 More likely
High CVE-2024-43532 RPC Endpoint Mapper Service Elevation of Privilege 8.8 0.1197 Exploitation Less Likely
High CVE-2024-6197 Windows cURL Implementation Remote Code Execution 8.8 0.0430 DisclosedExploitation Less Likely
High CVE-2024-43506 BranchCache Denial of Service 7.5 0.0230 Exploitation Less Likely
High CVE-2024-43515 Internet Small Computer Systems Interface (iSCSI) Denial of Service 7.5 0.0226 Exploitation Less Likely
High CVE-2024-43562 Windows Network Address Translation (NAT) Denial of Service 7.5 0.0222 Exploitation Less Likely
High CVE-2024-43565 Windows Network Address Translation (NAT) Denial of Service 7.5 0.0222 Exploitation Less Likely
High CVE-2024-38149 BranchCache Denial of Service 7.5 0.0221 Exploitation Less Likely
High CVE-2024-43533 Remote Desktop Client Remote Code Execution 8.8 0.0159 Exploitation Less Likely
High CVE-2024-43519 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0150 Exploitation Less Likely
High CVE-2024-43599 Remote Desktop Client Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2024-43517 Microsoft ActiveX Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2024-43574 Microsoft Windows Speech Remote Code Execution 8.3 0.0117 Exploitation Less Likely
High CVE-2024-43550 Windows Secure Channel Spoofing 7.4 0.0109 Exploitation Less Likely
High CVE-2024-43518 Windows Telephony Server Remote Code Execution 8.8 0.0099 Exploitation Less Likely
High CVE-2024-20659 Role: Windows Hyper-V Security Feature Bypass 7.1 0.0094 DisclosedExploitation Less Likely
High CVE-2024-43529 Windows Print Spooler Components Elevation of Privilege 7.3 0.0082 Exploitation Less Likely
High CVE-2024-43552 Windows Shell Remote Code Execution 7.3 0.0076 Exploitation Less Likely
Showing 1 to 25 of 64 1Next