Microsoft · Security update · October 8, 2024
KB5044320: October 2024 security update
KB5044320, released October 8, 2024, fixes 32 CVEs across 4 products. One of them is being exploited (CVE-2024-43572); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
32
None rated Critical
Exploited
1
CVE-2024-43572
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.6670
99th percentile
Priority of the 32 CVEs
Patch now 1
Urgent 2
High 25
Routine 4
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2024-43572 | Microsoft Management Console | Remote Code Execution | 7.8 | 0.6670 | KEVDisclosedExploited |
| Urgent | CVE-2024-43556 | Microsoft Graphics Component | Elevation of Privilege | 7.8 | 0.0072 | More likely |
| Urgent | CVE-2024-43509 | Microsoft Graphics Component | Elevation of Privilege | 7.8 | 0.0064 | More likely |
| High | CVE-2024-43532 | RPC Endpoint Mapper Service | Elevation of Privilege | 8.8 | 0.1197 | Exploitation Less Likely |
| High | CVE-2024-43541 | Microsoft Simple Certificate Enrollment Protocol | Denial of Service | 7.5 | 0.0231 | Exploitation Less Likely |
| High | CVE-2024-43515 | Internet Small Computer Systems Interface (iSCSI) | Denial of Service | 7.5 | 0.0226 | Exploitation Less Likely |
| High | CVE-2024-43544 | Microsoft Simple Certificate Enrollment Protocol | Denial of Service | 7.5 | 0.0222 | Exploitation Less Likely |
| High | CVE-2024-43545 | Windows Online Certificate Status Protocol (OCSP) | Denial of Service | 7.5 | 0.0222 | Exploitation Less Likely |
| High | CVE-2024-43611 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0182 | Exploitation Less Likely |
| High | CVE-2024-43592 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0165 | Exploitation Less Likely |
| High | CVE-2024-43593 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0165 | Exploitation Less Likely |
| High | CVE-2024-43519 | Microsoft WDAC OLE DB provider for SQL | Remote Code Execution | 8.8 | 0.0150 | Exploitation Less Likely |
| High | CVE-2024-43589 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0149 | Exploitation Less Likely |
| High | CVE-2024-43453 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0146 | Exploitation Less Likely |
| High | CVE-2024-38212 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0144 | Exploitation Less Likely |
| High | CVE-2024-43517 | Microsoft ActiveX | Remote Code Execution | 8.8 | 0.0144 | Exploitation Less Likely |
| High | CVE-2024-38265 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0142 | Exploitation Less Likely |
| High | CVE-2024-43549 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0141 | Exploitation Less Likely |
| High | CVE-2024-43564 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0141 | Exploitation Less Likely |
| High | CVE-2024-43607 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0141 | Exploitation Less Likely |
| High | CVE-2024-43608 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0141 | Exploitation Less Likely |
| High | CVE-2024-38124 | Windows Netlogon | Elevation of Privilege | 9.0 | 0.0118 | Exploitation Less Likely |
| High | CVE-2024-38262 | Windows Remote Desktop Licensing Service | Remote Code Execution | 7.5 | 0.0111 | Exploitation Less Likely |
| High | CVE-2024-43518 | Windows Telephony Server | Remote Code Execution | 8.8 | 0.0099 | Exploitation Less Likely |
| High | CVE-2024-38261 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 7.8 | 0.0085 | Exploitation Less Likely |
Showing 1 to 25 of 32
1Next