Skip to the content
The Update Bureau
Security

KB5034770: all 40 vulnerabilities

Cumulative update for Windows Server, version 2022, February 2024. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

40 vulnerabilities fixed
3 exploited 2 critical 37 important 1 moderate
VulnerabilitySeverityCVSS
CVE-2024-21412 Exploited
Internet Shortcut Files Security Feature Bypass Vulnerability
 Important 8.1
CVE-2024-21338 Exploited
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-21351 Exploited
Windows SmartScreen Security Feature Bypass Vulnerability
 Moderate 7.6
CVE-2024-21357
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-20684
Windows Hyper-V Denial of Service Vulnerability
 Critical 6.5
CVE-2024-21349
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21350
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21352
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21358
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21359
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21360
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21361
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21365
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21366
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21367
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21368
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21369
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21370
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21372
Windows OLE Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21375
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21391
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21420
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21354
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-21363
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Important 7.8
CVE-2024-21347
Microsoft ODBC Driver Remote Code Execution Vulnerability
 Important 7.5
CVE-2024-21348
Internet Connection Sharing (ICS) Denial of Service Vulnerability
 Important 7.5
CVE-2024-21406
Windows Printing Service Spoofing Vulnerability
 Important 7.5
CVE-2024-21355
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-21371
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-21405
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-21341
Windows Kernel Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-21356
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
 Important 6.5
CVE-2024-21339
Windows USB Generic Parent Driver Remote Code Execution Vulnerability
 Important 6.4
CVE-2024-21343
Windows Network Address Translation (NAT) Denial of Service Vulnerability
 Important 5.9
CVE-2024-21344
Windows Network Address Translation (NAT) Denial of Service Vulnerability
 Important 5.9
CVE-2024-21362
Windows Kernel Security Feature Bypass Vulnerability
 Important 5.5
CVE-2024-21377
Windows DNS Information Disclosure Vulnerability
 Important 5.5
CVE-2024-21340
Windows Kernel Information Disclosure Vulnerability
 Important 4.6
CVE-2024-21304
Trusted Compute Base Elevation of Privilege Vulnerability
 Important 4.1
CVE-2023-50387
MITRE: CVE-2023-50387 DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers
 Important —