Skip to the content
The Update Bureau
Security

KB5041578: all 43 vulnerabilities

Cumulative update for Windows Server, version 2019, August 2024. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

43 vulnerabilities fixed
4 exploited 2 critical 41 important
VulnerabilitySeverityCVSS
CVE-2024-38107 Exploited
Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-38193 Exploited
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-38178 Exploited
Scripting Engine Memory Corruption Vulnerability
 Important 7.5
CVE-2024-38106 Exploited
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-38140
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
 Critical 9.8
CVE-2022-3775
Redhat: CVE-2022-3775 grub2 - Heap based out-of-bounds write when rendering certain Unicode sequences
 Critical 7.1
CVE-2024-38199
Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
 Important 9.8
CVE-2024-38114
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-38115
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-38116
Windows IP Routing Management Snapin Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-38120
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-38121
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-38128
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-38130
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-38131
Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-38144
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
 Important 8.8
CVE-2024-38154
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-38180
Windows SmartScreen Security Feature Bypass Vulnerability
 Important 8.8
CVE-2024-29995
Windows Kerberos Elevation of Privilege Vulnerability
 Important 8.1
CVE-2024-38117
NTFS Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-38125
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-38127
Windows Hyper-V Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-38133
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-38134
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-38141
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-38142
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-38152
Windows OLE Remote Code Execution Vulnerability
 Important 7.8
CVE-2024-38153
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-38196
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-38215
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-37968
Windows DNS Spoofing Vulnerability
 Important 7.5
CVE-2024-38126
Windows Network Address Translation (NAT) Denial of Service Vulnerability
 Important 7.5
CVE-2024-38132
Windows Network Address Translation (NAT) Denial of Service Vulnerability
 Important 7.5
CVE-2024-38145
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
 Important 7.5
CVE-2024-38146
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
 Important 7.5
CVE-2024-38198
Windows Print Spooler Elevation of Privilege Vulnerability
 Important 7.5
CVE-2024-38136
Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-38223
Windows Initial Machine Configuration Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-38214
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
 Important 6.5
CVE-2024-38118
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
 Important 5.5
CVE-2024-38122
Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
 Important 5.5
CVE-2024-38151
Windows Kernel Information Disclosure Vulnerability
 Important 5.5
CVE-2024-38143
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
 Important 4.2