Microsoft · Security update · March 12, 2024

KB5035849: March 2024 cumulative update for Windows 10 1809

KB5035849, released March 12, 2024, fixes 32 CVEs across 5 products. One of them is being exploited (CVE-2024-26169); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use
CVEs closed
32
2 rated Critical
Exploited
1
CVE-2024-26169
Exploitation more likely
3
Microsoft's assessment
Highest EPSS
0.1626
96th percentile

Priority of the 32 CVEs

Patch now 1 Urgent 5 High 19 Routine 7

Applies to

ProductBuild after install
Windows 10 Version 1809 for 32-bit Systems17763.5576
Windows 10 Version 1809 for ARM64-based Systems17763.5576
Windows 10 Version 1809 for x64-based Systems17763.5576
Windows Server 201917763.5576
Windows Server 2019 (Server Core installation)17763.5576

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-26169 Windows Error ReportingElevation of Privilege7.8 0.0401 KEVRansomwareExploited
Urgent CVE-2024-21407 Role: Windows Hyper-VRemote Code Execution8.1 0.1626 Exploitation Less Likely
Urgent CVE-2024-21437 Microsoft Graphics ComponentElevation of Privilege7.8 0.0803 More likely
Urgent CVE-2024-26182 Windows KernelElevation of Privilege7.8 0.0557 More likely
Urgent CVE-2024-21433 Windows Print Spooler ComponentsElevation of Privilege7.0 0.0514 More likely
Urgent CVE-2024-21408 Role: Windows Hyper-VDenial of Service5.5 0.0451 Exploitation Less Likely
High CVE-2024-21438 Windows AllJoyn APIDenial of Service7.5 0.0272 Exploitation Less Likely
High CVE-2024-21440 Windows ODBC DriverRemote Code Execution8.8 0.0203 Exploitation Less Likely
High CVE-2024-21450 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0203 Exploitation Less Likely
High CVE-2024-26166 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0203 Exploitation Less Likely
High CVE-2024-26162 Windows ODBC DriverRemote Code Execution8.8 0.0202 Exploitation Less Likely
High CVE-2024-21441 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0195 Exploitation Less Likely
High CVE-2024-21444 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0195 Exploitation Less Likely
High CVE-2024-21451 Microsoft WDAC ODBC DriverRemote Code Execution8.8 0.0195 Exploitation Less Likely
High CVE-2024-26159 Windows ODBC DriverRemote Code Execution8.8 0.0195 Exploitation Less Likely
High CVE-2024-26161 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0195 Exploitation Less Likely
High CVE-2024-21443 Windows KernelElevation of Privilege7.3 0.0129 Exploitation Less Likely
High CVE-2024-26173 Windows KernelElevation of Privilege7.8 0.0089 Exploitation Less Likely
High CVE-2024-26178 Windows KernelElevation of Privilege7.8 0.0089 Exploitation Less Likely
High CVE-2024-26176 Windows KernelElevation of Privilege7.8 0.0083 Exploitation Less Likely
High CVE-2024-21434 Microsoft Windows SCSI Class System FileElevation of Privilege7.8 0.0083 Exploitation Less Likely
High CVE-2024-21436 Windows InstallerElevation of Privilege7.8 0.0072 Exploitation Less Likely
High CVE-2024-21432 Windows Update StackElevation of Privilege7.0 0.0069 Exploitation Less Likely
High CVE-2024-21446 Windows NTFSElevation of Privilege7.8 0.0066 Exploitation Less Likely
High CVE-2024-21439 Windows Telephony ServerElevation of Privilege7.0 0.0052 Exploitation Less Likely
Showing 1 to 25 of 32 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.