Skip to the content
The Update Bureau
Security

KB5043076: all 31 vulnerabilities

Cumulative update for Windows 11, version 23H2, September 2024. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

31 vulnerabilities fixed
3 exploited 1 critical 28 important 2 not rated
VulnerabilitySeverityCVSS
CVE-2024-43461 Exploited
Windows MSHTML Platform Spoofing Vulnerability
Important 8.8
CVE-2024-38014 Exploited
Windows Installer Elevation of Privilege Vulnerability
Important 7.8
CVE-2024-38217 Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
Important 5.4
Windows Network Address Translation (NAT) Remote Code Execution Vulnerability
Critical 7.5
Microsoft Management Console Remote Code Execution Vulnerability
Important 8.8
Windows TCP/IP Remote Code Execution Vulnerability
Important 8.1
Windows TCP/IP Remote Code Execution Vulnerability
Important 8.1
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
Important 8.1
Windows Security Zone Mapping Security Feature Bypass Vulnerability
Important 7.8
PowerShell Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Important 7.8
Kernel Streaming Service Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.8
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.8
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.8
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Important 7.8
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Important 7.8
Microsoft AllJoyn API Information Disclosure Vulnerability
Important 7.5
Windows Kerberos Elevation of Privilege Vulnerability
Important 7.2
Win32k Elevation of Privilege Vulnerability
Important 7.0
Windows Storage Elevation of Privilege Vulnerability
Important 7.0
Windows Networking Denial of Service Vulnerability
Important 6.5
Windows Hyper-V Denial of Service Vulnerability
Important 6.5
Windows Authentication Information Disclosure Vulnerability
Important 5.5
Redhat: CVE-2022-2601 grub2 - Buffer overflow in grub_font_construct_glyph() can lead to out-of-bound write and possible secure boot bypass
Not rated —
Redhat: CVE-2023-40547 Shim - RCE in HTTP boot support may lead to secure boot bypass
Not rated —