Skip to the content
The Update Bureau
Security

KB5036909: all 78 vulnerabilities

Cumulative update for Windows Server, version 2022, April 2024. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

78 vulnerabilities fixed
1 exploited 78 important
VulnerabilitySeverityCVSS
CVE-2024-26234 Exploited
Proxy Driver Spoofing Vulnerability
Important 6.7
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Important 8.8
Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability
Important 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Important 8.8
SmartScreen Prompt Security Feature Bypass Vulnerability
Important 8.8
Windows Cryptographic Services Remote Code Execution Vulnerability
Important 8.4
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Windows Kernel Elevation of Privilege Vulnerability
Important 7.8
Windows Authentication Elevation of Privilege Vulnerability
Important 7.8
Microsoft Install Service Elevation of Privilege Vulnerability
Important 7.8
Secure Boot Security Feature Bypass Vulnerability
Important 7.8
Windows Kernel Elevation of Privilege Vulnerability
Important 7.8
Windows Cryptographic Services Security Feature Bypass Vulnerability
Important 7.8
Windows CSC Service Elevation of Privilege Vulnerability
Important 7.8
Windows Telephony Server Elevation of Privilege Vulnerability
Important 7.8
Windows Defender Credential Guard Elevation of Privilege Vulnerability
Important 7.8
Windows Telephony Server Elevation of Privilege Vulnerability
Important 7.8
Win32k Elevation of Privilege Vulnerability
Important 7.8
Secure Boot Security Feature Bypass Vulnerability
Important 7.8
Windows Storage Elevation of Privilege Vulnerability
Important 7.8
Secure Boot Security Feature Bypass Vulnerability
Important 7.8
Windows Kerberos Security Feature Bypass Vulnerability
Important 7.5
DHCP Server Service Denial of Service Vulnerability
Important 7.5
DHCP Server Service Denial of Service Vulnerability
Important 7.5
HTTP.sys Denial of Service Vulnerability
Important 7.5
Windows Kerberos Elevation of Privilege Vulnerability
Important 7.5
Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability
Important 7.5
Secure Boot Security Feature Bypass Vulnerability
Important 7.5
Secure Boot Security Feature Bypass Vulnerability
Important 7.4
Windows File Server Resource Management Service Elevation of Privilege Vulnerability
Important 7.3
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Important 7.3
DHCP Server Service Remote Code Execution Vulnerability
Important 7.2
DHCP Server Service Remote Code Execution Vulnerability
Important 7.2
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Important 7.2
Windows DNS Server Remote Code Execution Vulnerability
Important 7.2
Windows DNS Server Remote Code Execution Vulnerability
Important 7.2
Windows DNS Server Remote Code Execution Vulnerability
Important 7.2
Windows DNS Server Remote Code Execution Vulnerability
Important 7.2
Windows DNS Server Remote Code Execution Vulnerability
Important 7.2
Windows DNS Server Remote Code Execution Vulnerability
Important 7.2
Windows DNS Server Remote Code Execution Vulnerability
Important 7.2
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
Important 7.2
Secure Boot Security Feature Bypass Vulnerability
Important 7.1
Windows Telephony Server Elevation of Privilege Vulnerability
Important 7.0
Windows USB Print Driver Elevation of Privilege Vulnerability
Important 7.0
Secure Boot Security Feature Bypass Vulnerability
Important 6.8
Windows rndismp6.sys Remote Code Execution Vulnerability
Important 6.8
Windows rndismp6.sys Remote Code Execution Vulnerability
Important 6.8
Secure Boot Security Feature Bypass Vulnerability
Important 6.8
Secure Boot Security Feature Bypass Vulnerability
Important 6.7
Lenovo: CVE-2024-23593 Modify Boot Manager and Escalate Privileges
Important 6.7
Secure Boot Security Feature Bypass Vulnerability
Important 6.7
Secure Boot Security Feature Bypass Vulnerability
Important 6.7
Secure Boot Security Feature Bypass Vulnerability
Important 6.7
Secure Boot Security Feature Bypass Vulnerability
Important 6.7
Secure Boot Security Feature Bypass Vulnerability
Important 6.7
Secure Boot Security Feature Bypass Vulnerability
Important 6.7
Windows Kerberos Denial of Service Vulnerability
Important 6.5
Windows Distributed File System (DFS) Information Disclosure Vulnerability
Important 6.5
Lenovo: CVE-2024-23594 Stack buffer overflow in Lenovo system recovery boot manager
Important 6.4
Secure Boot Security Feature Bypass Vulnerability
Important 6.3
Windows Hyper-V Denial of Service Vulnerability
Important 6.2
BitLocker Security Feature Bypass Vulnerability
Important 6.1
Windows DWM Core Library Information Disclosure Vulnerability
Important 5.5
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
Important 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Important 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Important 5.5
Windows Mobile Hotspot Information Disclosure Vulnerability
Important 5.0
Windows Authentication Elevation of Privilege Vulnerability
Important 4.3
Secure Boot Security Feature Bypass Vulnerability
Important 4.1
Secure Boot Security Feature Bypass Vulnerability
Important —