Skip to the content
The Update Bureau
Security

KB5042881: all 41 vulnerabilities

Cumulative update for Windows Server, version 2022, September 2024. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

41 vulnerabilities fixed
3 exploited 2 critical 37 important 2 not rated
VulnerabilitySeverityCVSS
CVE-2024-43461 Exploited
Windows MSHTML Platform Spoofing Vulnerability
Important 8.8
CVE-2024-38014 Exploited
Windows Installer Elevation of Privilege Vulnerability
Important 7.8
CVE-2024-38217 Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
Important 5.4
Windows TCP/IP Remote Code Execution Vulnerability
Critical 9.8
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
Critical 7.5
Microsoft Management Console Remote Code Execution Vulnerability
Important 8.8
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Important 8.8
Windows Remote Desktop Licensing Service Spoofing Vulnerability
Important 8.8
Windows TCP/IP Remote Code Execution Vulnerability
Important 8.1
Windows TCP/IP Remote Code Execution Vulnerability
Important 8.1
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Important 8.1
Windows Security Zone Mapping Security Feature Bypass Vulnerability
Important 7.8
PowerShell Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.8
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.8
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.8
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Important 7.8
Windows Deployment Services Remote Code Execution Vulnerability
Important 7.5
DHCP Server Service Denial of Service Vulnerability
Important 7.5
Microsoft AllJoyn API Information Disclosure Vulnerability
Important 7.5
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Important 7.5
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Important 7.5
Windows Kerberos Elevation of Privilege Vulnerability
Important 7.2
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Important 7.1
Win32k Elevation of Privilege Vulnerability
Important 7.0
Windows Storage Elevation of Privilege Vulnerability
Important 7.0
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Important 6.5
Windows Remote Desktop Licensing Service Denial of Service Vulnerability
Important 6.5
Windows Networking Denial of Service Vulnerability
Important 6.5
Windows Hyper-V Denial of Service Vulnerability
Important 6.5
Windows Remote Desktop Licensing Service Information Disclosure Vulnerability
Important 6.5
Windows Authentication Information Disclosure Vulnerability
Important 5.5
Redhat: CVE-2022-2601 grub2 - Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass
Not rated —
Redhat: CVE-2023-40547 Shim - RCE in HTTP boot support may lead to secure boot bypass
Not rated —