Microsoft · Security update · October 8, 2024

KB5044321: October 2024 security update

KB5044321, released October 8, 2024, fixes 36 CVEs across 2 products. One of them is being exploited (CVE-2024-43572); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
36
None rated Critical
Exploited
1
CVE-2024-43572
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.6670
99th percentile

Priority of the 36 CVEs

Patch now 1 Urgent 2 High 28 Routine 5

Applies to

Product
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-43572 Microsoft Management Console Remote Code Execution 7.8 0.6670 KEVDisclosedExploited
Urgent CVE-2024-43556 Microsoft Graphics Component Elevation of Privilege 7.8 0.0072 More likely
Urgent CVE-2024-43509 Microsoft Graphics Component Elevation of Privilege 7.8 0.0064 More likely
High CVE-2024-43532 RPC Endpoint Mapper Service Elevation of Privilege 8.8 0.1197 Exploitation Less Likely
High CVE-2024-43541 Microsoft Simple Certificate Enrollment Protocol Denial of Service 7.5 0.0231 Exploitation Less Likely
High CVE-2024-43506 BranchCache Denial of Service 7.5 0.0230 Exploitation Less Likely
High CVE-2024-43515 Internet Small Computer Systems Interface (iSCSI) Denial of Service 7.5 0.0226 Exploitation Less Likely
High CVE-2024-43544 Microsoft Simple Certificate Enrollment Protocol Denial of Service 7.5 0.0222 Exploitation Less Likely
High CVE-2024-43545 Windows Online Certificate Status Protocol (OCSP) Denial of Service 7.5 0.0222 Exploitation Less Likely
High CVE-2024-38149 BranchCache Denial of Service 7.5 0.0221 Exploitation Less Likely
High CVE-2024-43611 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0182 Exploitation Less Likely
High CVE-2024-43592 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0165 Exploitation Less Likely
High CVE-2024-43593 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0165 Exploitation Less Likely
High CVE-2024-43519 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0150 Exploitation Less Likely
High CVE-2024-43589 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0149 Exploitation Less Likely
High CVE-2024-43453 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0146 Exploitation Less Likely
High CVE-2024-43599 Remote Desktop Client Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2024-38212 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2024-43517 Microsoft ActiveX Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2024-38265 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0142 Exploitation Less Likely
High CVE-2024-43549 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0141 Exploitation Less Likely
High CVE-2024-43564 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0141 Exploitation Less Likely
High CVE-2024-43607 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0141 Exploitation Less Likely
High CVE-2024-43608 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0141 Exploitation Less Likely
High CVE-2024-38124 Windows Netlogon Elevation of Privilege 9.0 0.0118 Exploitation Less Likely
Showing 1 to 25 of 36 1Next