Skip to the content
The Update Bureau
Security

KB5040437: all 86 vulnerabilities

Cumulative update for Windows Server, version 2022, July 2024. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

86 vulnerabilities fixed
2 exploited 4 critical 80 important 2 moderate
VulnerabilitySeverityCVSS
CVE-2024-38080 Exploited
Windows Hyper-V Elevation of Privilege Vulnerability
Important 7.8
CVE-2024-38112 Exploited
Windows MSHTML Platform Spoofing Vulnerability
Important 7.5
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Critical 9.8
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Critical 9.8
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Critical 9.8
Windows Imaging Component Remote Code Execution Vulnerability
Critical 8.8
Windows Text Services Framework Elevation of Privilege Vulnerability
Important 8.8
Secure Boot Security Feature Bypass Vulnerability
Important 8.8
Windows MultiPoint Services Remote Code Execution Vulnerability
Important 8.8
Secure Boot Security Feature Bypass Vulnerability
Important 8.8
Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
Important 8.8
Windows Fax Service Remote Code Execution Vulnerability
Important 8.8
Secure Boot Security Feature Bypass Vulnerability
Important 8.4
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Secure Boot Security Feature Bypass Vulnerability
Important 8.0
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Important 7.8
Windows Filtering Platform Elevation of Privilege Vulnerability
Important 7.8
PowerShell Elevation of Privilege Vulnerability
Important 7.8
PowerShell Elevation of Privilege Vulnerability
Important 7.8
Windows Workstation Service Elevation of Privilege Vulnerability
Important 7.8
Windows Graphics Component Remote Code Execution Vulnerability
Important 7.8
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Important 7.8
Win32k Elevation of Privilege Vulnerability
Important 7.8
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Important 7.8
Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability
Important 7.8
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.8
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.8
Windows File Explorer Elevation of Privilege Vulnerability
Important 7.8
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Important 7.8
CERT/CC: CVE-2024-3596 RADIUS Protocol Spoofing Vulnerability
Important 7.5
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
Important 7.5
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
Important 7.5
DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability
Important 7.5
Windows TCP/IP Information Disclosure Vulnerability
Important 7.5
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
Important 7.5
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
Important 7.5
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
Important 7.5
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
Important 7.5
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
Important 7.5
Microsoft WS-Discovery Denial of Service Vulnerability
Important 7.5
PowerShell Elevation of Privilege Vulnerability
Important 7.3
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
Important 7.2
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
Important 7.2
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
Important 7.2
DHCP Server Service Remote Code Execution Vulnerability
Important 7.2
Windows NTLM Spoofing Vulnerability
Important 7.1
Windows Image Acquisition Elevation of Privilege Vulnerability
Important 7.0
Windows Enroll Engine Security Feature Bypass Vulnerability
Important 7.0
Secure Boot Security Feature Bypass Vulnerability
Important 6.8
BitLocker Security Feature Bypass Vulnerability
Important 6.8
Secure Boot Security Feature Bypass Vulnerability
Important 6.8
Microsoft Windows Server Backup Elevation of Privilege Vulnerability
Important 6.7
Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability
Important 6.6
Windows Line Printer Daemon Service Denial of Service Vulnerability
Important 6.5
Windows Themes Spoofing Vulnerability
Important 6.5
Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability
Important 6.5
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Important 6.5
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Important 6.5
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Important 6.5
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
Important 5.9
Microsoft Message Queuing Information Disclosure Vulnerability
Important 5.5
Windows Kernel Information Disclosure Vulnerability
Important 5.5
Microsoft Windows Codecs Library Information Disclosure Vulnerability
Important 5.5
Microsoft Windows Codecs Library Information Disclosure Vulnerability
Important 5.5
Windows iSCSI Service Denial of Service Vulnerability
Important 5.3
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Important 4.7
Github: CVE-2024-38517 TenCent RapidJSON Elevation of Privilege Vulnerability
Moderate 7.8
Github: CVE-2024-39684 TenCent RapidJSON Elevation of Privilege Vulnerability
Moderate 7.8