Skip to the content
The Update Bureau
Security

KB5035853: all 38 vulnerabilities

Cumulative update for Windows 11, version 23H2, March 2024. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

38 vulnerabilities fixed
2 critical 36 important
VulnerabilitySeverityCVSS
CVE-2024-21407
Windows Hyper-V Remote Code Execution Vulnerability
 Critical 8.1
CVE-2024-21408
Windows Hyper-V Denial of Service Vulnerability
 Critical 5.5
CVE-2024-21435
Windows OLE Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21440
Microsoft ODBC Driver Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21441
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21444
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21450
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21451
Microsoft ODBC Driver Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-26159
Microsoft ODBC Driver Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-26161
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-26162
Microsoft ODBC Driver Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-26166
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-21431
Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
 Important 7.8
CVE-2024-21434
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-21436
Windows Installer Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-21437
Windows Graphics Component Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-21442
Windows USB Print Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-21446
NTFS Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-26169
Windows Error Reporting Service Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-26170
Windows Composite Image File System (CimFS) Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-26173
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-26176
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-26178
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-21438
Microsoft AllJoyn API Denial of Service Vulnerability
 Important 7.5
CVE-2024-26190
Microsoft QUIC Denial of Service Vulnerability
 Important 7.5
CVE-2024-21443
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.3
CVE-2024-21432
Windows Update Stack Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-21433
Windows Print Spooler Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-21439
Windows Telephony Server Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-21445
Windows USB Print Driver Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-21429
Windows USB Hub Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-26185
Windows Compressed Folder Tampering Vulnerability
 Important 6.5
CVE-2024-21430
Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
 Important 5.7
CVE-2024-26160
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
 Important 5.5
CVE-2024-26174
Windows Kernel Information Disclosure Vulnerability
 Important 5.5
CVE-2024-26177
Windows Kernel Information Disclosure Vulnerability
 Important 5.5
CVE-2024-26181
Windows Kernel Denial of Service Vulnerability
 Important 5.5
CVE-2023-28746
Intel: CVE-2023-28746 Register File Data Sampling (RFDS)
 Important —