Microsoft · ServicingStack update · October 8, 2024

KB5044288: October 2024 cumulative update for Windows Server 23H2

KB5044288, released October 8, 2024, fixes 86 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.1189). 2 of them are being exploited (CVE-2024-43572); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEV5 publicly disclosedUnsupported product
CVEs closed
86
1 rated Critical
Exploited
2
CVE-2024-43572
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.6670
99th percentile

Priority of the 86 CVEs

Patch now 2 Urgent 6 High 49 Routine 29

Applies to

ProductBuild after install
Windows Server 2022, 23H2 Edition (Server Core installation)25398.1189

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-43572 Microsoft Management Console Remote Code Execution 7.8 0.6670 KEVDisclosedExploited
Patch now CVE-2024-43573 Windows MSHTML Platform Spoofing 6.5 0.4611 KEVDisclosedExploited
Urgent CVE-2024-43560 Windows Storage Port Driver Elevation of Privilege 7.8 0.0357 More likely
Urgent CVE-2024-43582 Windows Remote Desktop Remote Code Execution 8.1 0.0316 Exploitation Less Likely
Urgent CVE-2024-43581 OpenSSH for Windows Remote Code Execution 7.1 0.0140 More likely
Urgent CVE-2024-43615 OpenSSH for Windows Remote Code Execution 7.1 0.0124 More likely
Urgent CVE-2024-43556 Microsoft Graphics Component Elevation of Privilege 7.8 0.0072 More likely
Urgent CVE-2024-43509 Microsoft Graphics Component Elevation of Privilege 7.8 0.0064 More likely
High CVE-2024-43532 RPC Endpoint Mapper Service Elevation of Privilege 8.8 0.1197 Exploitation Less Likely
High CVE-2024-6197 Windows cURL Implementation Remote Code Execution 8.8 0.0430 DisclosedExploitation Less Likely
High CVE-2024-43521 Role: Windows Hyper-V Denial of Service 7.5 0.0245 Exploitation Less Likely
High CVE-2024-43567 Role: Windows Hyper-V Denial of Service 7.5 0.0231 Exploitation Less Likely
High CVE-2024-43575 Role: Windows Hyper-V Denial of Service 7.5 0.0231 Exploitation Less Likely
High CVE-2024-43541 Microsoft Simple Certificate Enrollment Protocol Denial of Service 7.5 0.0231 Exploitation Less Likely
High CVE-2024-43506 BranchCache Denial of Service 7.5 0.0230 Exploitation Less Likely
High CVE-2024-43515 Internet Small Computer Systems Interface (iSCSI) Denial of Service 7.5 0.0226 Exploitation Less Likely
High CVE-2024-43544 Microsoft Simple Certificate Enrollment Protocol Denial of Service 7.5 0.0222 Exploitation Less Likely
High CVE-2024-43545 Windows Online Certificate Status Protocol (OCSP) Denial of Service 7.5 0.0222 Exploitation Less Likely
High CVE-2024-43562 Windows Network Address Translation (NAT) Denial of Service 7.5 0.0222 Exploitation Less Likely
High CVE-2024-43565 Windows Network Address Translation (NAT) Denial of Service 7.5 0.0222 Exploitation Less Likely
High CVE-2024-38149 BranchCache Denial of Service 7.5 0.0221 Exploitation Less Likely
High CVE-2024-43611 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0182 Exploitation Less Likely
High CVE-2024-38202 Windows Update Stack Elevation of Privilege 7.3 0.0168 DisclosedExploitation Less Likely
High CVE-2024-43592 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0165 Exploitation Less Likely
High CVE-2024-43593 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0165 Exploitation Less Likely
Showing 1 to 25 of 86 1Next