Microsoft · Security update · April 9, 2024

KB5036922: April 2024 security update

KB5036922, released April 9, 2024, fixes 32 CVEs across 2 products. One of them is being exploited (CVE-2024-26234). Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 publicly disclosedUnsupported product
CVEs closed
32
None rated Critical
Exploited
1
CVE-2024-26234
Exploitation more likely
5
Microsoft's assessment
Highest EPSS
0.6258
99th percentile

Priority of the 32 CVEs

Patch now 1 Urgent 5 High 22 Routine 4

Applies to

Product
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-26234 Windows Proxy DriverSpoofing6.7 0.0485 DisclosedExploited
Urgent CVE-2024-26212 Windows DHCP ServerDenial of Service7.5 0.6258 More likely
Urgent CVE-2024-26230 Windows Remote Access Connection ManagerElevation of Privilege7.8 0.2411 More likely
Urgent CVE-2024-26158 Microsoft Install ServiceElevation of Privilege7.8 0.1226 More likely
Urgent CVE-2024-29056 Windows Authentication MethodsElevation of Privilege4.3 0.0101 More likely
Urgent CVE-2024-26241 Windows Win32K - ICOMPElevation of Privilege7.8 0.0073 More likely
High CVE-2024-26229 Windows KernelElevation of Privilege7.8 0.0938 Exploitation Less Likely
High CVE-2024-26215 Windows DHCP ServerDenial of Service7.5 0.0267 Exploitation Less Likely
High CVE-2024-20678 Windows Remote Procedure CallRemote Code Execution8.8 0.0252 Exploitation Less Likely
High CVE-2024-26208 Windows Message QueuingRemote Code Execution7.2 0.0228 Exploitation Less Likely
High CVE-2024-26195 Windows DHCP ServerRemote Code Execution7.2 0.0222 Exploitation Less Likely
High CVE-2024-26214 Microsoft WDAC ODBC DriverRemote Code Execution8.8 0.0202 Exploitation Less Likely
High CVE-2024-26210 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0196 Exploitation Less Likely
High CVE-2024-26244 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0196 Exploitation Less Likely
High CVE-2024-26179 Windows Routing and Remote Access Service (RRAS)Remote Code Execution8.8 0.0181 Exploitation Less Likely
High CVE-2024-26200 Windows Routing and Remote Access Service (RRAS)Remote Code Execution8.8 0.0181 Exploitation Less Likely
High CVE-2024-26205 Windows Routing and Remote Access Service (RRAS)Remote Code Execution8.8 0.0181 Exploitation Less Likely
High CVE-2024-29066 Windows Distributed File System (DFS)Remote Code Execution7.2 0.0134 Exploitation Less Likely
High CVE-2024-29050 Windows Cryptographic ServicesRemote Code Execution8.4 0.0125 Exploitation Less Likely
High CVE-2024-28925 Windows Secure BootSecurity Feature Bypass8.0 0.0123 Exploitation Less Likely
High CVE-2024-26240 Windows Secure BootSecurity Feature Bypass8.0 0.0106 Exploitation Less Likely
High CVE-2024-26248 Windows KerberosElevation of Privilege7.5 0.0103 Exploitation Less Likely
High CVE-2024-26232 Windows Message QueuingRemote Code Execution7.3 0.0093 Exploitation Less Likely
High CVE-2024-26216 Windows File Server Resource Management ServiceElevation of Privilege7.3 0.0087 Exploitation Less Likely
High CVE-2022-0001 IntelInformation Disclosure8.2 0.0051 Exploitation Less Likely
Showing 1 to 25 of 32 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.