Microsoft · Security update · October 8, 2024

KB5044286: October 2024 cumulative update for Windows 10 1507

KB5044286, released October 8, 2024, fixes 33 CVEs across 4 products. 2 of them are being exploited (CVE-2024-43572); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEV2 publicly disclosedUnsupported product
CVEs closed
33
None rated Critical
Exploited
2
CVE-2024-43572
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.6670
99th percentile

Priority of the 33 CVEs

Patch now 2 Urgent 3 High 19 Routine 9

Applies to

ProductBuild after install
Microsoft .NET Framework 4.6/4.6.2 on Windows 10 for 32-bit Systems10240.20796
Microsoft .NET Framework 4.6/4.6.2 on Windows 10 for x64-based Systems10240.20796
Windows 10 for 32-bit Systems10240.20796
Windows 10 for x64-based Systems10240.20796

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-43572 Microsoft Management Console Remote Code Execution 7.8 0.6670 KEVDisclosedExploited
Patch now CVE-2024-43573 Windows MSHTML Platform Spoofing 6.5 0.4611 KEVDisclosedExploited
Urgent CVE-2024-43560 Windows Storage Port Driver Elevation of Privilege 7.8 0.0357 More likely
Urgent CVE-2024-43556 Microsoft Graphics Component Elevation of Privilege 7.8 0.0072 More likely
Urgent CVE-2024-43509 Microsoft Graphics Component Elevation of Privilege 7.8 0.0064 More likely
High CVE-2024-43532 RPC Endpoint Mapper Service Elevation of Privilege 8.8 0.1197 Exploitation Less Likely
High CVE-2024-43484 .NET, .NET Framework, Visual Studio Denial of Service 7.5 0.0296 Exploitation Less Likely
High CVE-2024-43483 .NET, .NET Framework, Visual Studio Denial of Service 7.5 0.0290 Exploitation Less Likely
High CVE-2024-43506 BranchCache Denial of Service 7.5 0.0230 Exploitation Less Likely
High CVE-2024-43515 Internet Small Computer Systems Interface (iSCSI) Denial of Service 7.5 0.0226 Exploitation Less Likely
High CVE-2024-43562 Windows Network Address Translation (NAT) Denial of Service 7.5 0.0222 Exploitation Less Likely
High CVE-2024-43565 Windows Network Address Translation (NAT) Denial of Service 7.5 0.0222 Exploitation Less Likely
High CVE-2024-38149 BranchCache Denial of Service 7.5 0.0221 Exploitation Less Likely
High CVE-2024-43519 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0150 Exploitation Less Likely
High CVE-2024-43599 Remote Desktop Client Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2024-43517 Microsoft ActiveX Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2024-43550 Windows Secure Channel Spoofing 7.4 0.0109 Exploitation Less Likely
High CVE-2024-43518 Windows Telephony Server Remote Code Execution 8.8 0.0099 Exploitation Less Likely
High CVE-2024-30092 Windows Hyper-V Remote Code Execution 8.0 0.0068 Exploitation Less Likely
High CVE-2024-43501 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0066 Exploitation Less Likely
High CVE-2024-43514 Windows NTFS Elevation of Privilege 7.8 0.0060 Exploitation Less Likely
High CVE-2024-43535 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0052 Exploitation Less Likely
High CVE-2024-43553 Windows NT OS Kernel Elevation of Privilege 7.4 0.0050 Exploitation Less Likely
High CVE-2024-43563 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0046 Exploitation Less Likely
Routine CVE-2024-43534 Microsoft Graphics Component Information Disclosure 6.5 0.0178 Exploitation Less Likely
Showing 1 to 25 of 33 1Next