Skip to the content
The Update Bureau
Security

KB5044281: all 67 vulnerabilities

Cumulative update for Windows Server, version 2022, October 2024. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

67 vulnerabilities fixed
2 exploited 1 critical 65 important 1 moderate
VulnerabilitySeverityCVSS
CVE-2024-43572 Exploited
Microsoft Management Console Remote Code Execution Vulnerability
Important 7.8
CVE-2024-43573 Exploited
Windows MSHTML Platform Spoofing Vulnerability
Moderate 6.5
Remote Desktop Protocol Server Remote Code Execution Vulnerability
Critical 8.1
Windows Netlogon Elevation of Privilege Vulnerability
Important 9.0
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
Important 8.8
Windows Telephony Server Remote Code Execution Vulnerability
Important 8.8
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Important 8.8
Remote Registry Service Elevation of Privilege Vulnerability
Important 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 8.8
Hackerone: CVE-2024-6197 Freeing stack buffer in utf8asn1str
Important 8.8
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
Important 8.3
Windows Hyper-V Remote Code Execution Vulnerability
Important 8.0
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Important 7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.8
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
Important 7.8
Windows Storage Elevation of Privilege Vulnerability
Important 7.8
Windows Graphics Component Elevation of Privilege Vulnerability
Important 7.8
Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
Important 7.8
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Important 7.8
Windows Scripting Engine Security Feature Bypass Vulnerability
Important 7.7
BranchCache Denial of Service Vulnerability
Important 7.5
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
Important 7.5
BranchCache Denial of Service Vulnerability
Important 7.5
Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability
Important 7.5
Windows Hyper-V Denial of Service Vulnerability
Important 7.5
Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
Important 7.5
Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
Important 7.5
Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability
Important 7.5
Windows Network Address Translation (NAT) Denial of Service Vulnerability
Important 7.5
Windows Network Address Translation (NAT) Denial of Service Vulnerability
Important 7.5
Windows Hyper-V Denial of Service Vulnerability
Important 7.5
Windows Hyper-V Denial of Service Vulnerability
Important 7.5
Windows Secure Channel Spoofing Vulnerability
Important 7.4
NT OS Kernel Elevation of Privilege Vulnerability
Important 7.4
Windows Update Stack Elevation of Privilege Vulnerability
Important 7.3
Windows Print Spooler Elevation of Privilege Vulnerability
Important 7.3
Windows Hyper-V Security Feature Bypass Vulnerability
Important 7.1
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Important 7.1
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Important 7.1
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Important 7.0
Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
Important 6.7
Windows Kernel Elevation of Privilege Vulnerability
Important 6.7
Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
Important 6.7
Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
Important 6.7
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
Important 6.5
Windows Graphics Component Information Disclosure Vulnerability
Important 6.5
Windows Kerberos Information Disclosure Vulnerability
Important 6.5
Windows Kernel Elevation of Privilege Vulnerability
Important 6.4
Windows Cryptographic Information Disclosure Vulnerability
Important 5.6
Windows Kernel-Mode Driver Information Disclosure Vulnerability
Important 5.5
Code Integrity Guard Security Feature Bypass Vulnerability
Important 5.5
Windows Kernel Denial of Service Vulnerability
Important 5.0
Windows Remote Desktop Services Tampering Vulnerability
Important 4.8
Intel: CVE-2022-0001 Branch History Injection
Important 4.7