Skip to the content
The Update Bureau
Security

KB5036892: all 63 vulnerabilities

Cumulative update for Windows 10, versions 21H2 and 22H2, April 2024. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

63 vulnerabilities fixed
1 exploited 63 important
VulnerabilitySeverityCVSS
CVE-2024-26234 Exploited
Proxy Driver Spoofing Vulnerability
Important 6.7
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Important 8.8
Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability
Important 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Important 8.8
SmartScreen Prompt Security Feature Bypass Vulnerability
Important 8.8
Windows Cryptographic Services Remote Code Execution Vulnerability
Important 8.4
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Windows Kernel Elevation of Privilege Vulnerability
Important 7.8
Windows Authentication Elevation of Privilege Vulnerability
Important 7.8
Microsoft Install Service Elevation of Privilege Vulnerability
Important 7.8
Secure Boot Security Feature Bypass Vulnerability
Important 7.8
Windows Kernel Elevation of Privilege Vulnerability
Important 7.8
Windows Cryptographic Services Security Feature Bypass Vulnerability
Important 7.8
Windows CSC Service Elevation of Privilege Vulnerability
Important 7.8
Windows Telephony Server Elevation of Privilege Vulnerability
Important 7.8
Windows Defender Credential Guard Elevation of Privilege Vulnerability
Important 7.8
Windows Telephony Server Elevation of Privilege Vulnerability
Important 7.8
Win32k Elevation of Privilege Vulnerability
Important 7.8
Secure Boot Security Feature Bypass Vulnerability
Important 7.8
Windows Storage Elevation of Privilege Vulnerability
Important 7.8
Secure Boot Security Feature Bypass Vulnerability
Important 7.8
HTTP.sys Denial of Service Vulnerability
Important 7.5
Windows Kerberos Elevation of Privilege Vulnerability
Important 7.5
Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability
Important 7.5
Secure Boot Security Feature Bypass Vulnerability
Important 7.5
Secure Boot Security Feature Bypass Vulnerability
Important 7.4
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Important 7.3
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Important 7.2
Secure Boot Security Feature Bypass Vulnerability
Important 7.1
Windows Telephony Server Elevation of Privilege Vulnerability
Important 7.0
Windows USB Print Driver Elevation of Privilege Vulnerability
Important 7.0
Secure Boot Security Feature Bypass Vulnerability
Important 6.8
Windows rndismp6.sys Remote Code Execution Vulnerability
Important 6.8
Windows rndismp6.sys Remote Code Execution Vulnerability
Important 6.8
Secure Boot Security Feature Bypass Vulnerability
Important 6.8
Secure Boot Security Feature Bypass Vulnerability
Important 6.7
Lenovo: CVE-2024-23593 Modify Boot Manager and Escalate Privileges
Important 6.7
Secure Boot Security Feature Bypass Vulnerability
Important 6.7
Secure Boot Security Feature Bypass Vulnerability
Important 6.7
Secure Boot Security Feature Bypass Vulnerability
Important 6.7
Secure Boot Security Feature Bypass Vulnerability
Important 6.7
Secure Boot Security Feature Bypass Vulnerability
Important 6.7
Secure Boot Security Feature Bypass Vulnerability
Important 6.7
Windows Kerberos Denial of Service Vulnerability
Important 6.5
Lenovo: CVE-2024-23594 Stack buffer overflow in Lenovo system recovery boot manager
Important 6.4
Secure Boot Security Feature Bypass Vulnerability
Important 6.3
Windows Hyper-V Denial of Service Vulnerability
Important 6.2
BitLocker Security Feature Bypass Vulnerability
Important 6.1
Windows DWM Core Library Information Disclosure Vulnerability
Important 5.5
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
Important 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Important 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Important 5.5
Windows Mobile Hotspot Information Disclosure Vulnerability
Important 5.0
Intel: CVE-2022-0001 Branch History Injection
Important 4.7
Secure Boot Security Feature Bypass Vulnerability
Important 4.1
Secure Boot Security Feature Bypass Vulnerability
Important —