Microsoft · Security update · October 8, 2024

KB5044286: October 2024 cumulative update for Windows 10 1507

KB5044286, released October 8, 2024, fixes 33 CVEs across 4 products. 2 of them are being exploited (CVE-2024-43572); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEV2 publicly disclosedUnsupported product
CVEs closed
33
None rated Critical
Exploited
2
CVE-2024-43572
Exploitation more likely
3
Microsoft's assessment
Highest EPSS
0.6670
99th percentile

Priority of the 33 CVEs

Patch now 2 Urgent 3 High 19 Routine 9

Applies to

ProductBuild after install
Microsoft .NET Framework 4.6/4.6.2 on Windows 10 for 32-bit Systems10240.20796
Microsoft .NET Framework 4.6/4.6.2 on Windows 10 for x64-based Systems10240.20796
Windows 10 for 32-bit Systems10240.20796
Windows 10 for x64-based Systems10240.20796

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-43572 Microsoft Management ConsoleRemote Code Execution7.8 0.6670 KEVDisclosedExploited
Patch now CVE-2024-43573 Windows MSHTML PlatformSpoofing6.5 0.4611 KEVDisclosedExploited
Urgent CVE-2024-43560 Windows Storage Port DriverElevation of Privilege7.8 0.0357 More likely
Urgent CVE-2024-43556 Microsoft Graphics ComponentElevation of Privilege7.8 0.0072 More likely
Urgent CVE-2024-43509 Microsoft Graphics ComponentElevation of Privilege7.8 0.0064 More likely
High CVE-2024-43532 RPC Endpoint Mapper ServiceElevation of Privilege8.8 0.1197 Exploitation Less Likely
High CVE-2024-43484 .NET, .NET Framework, Visual StudioDenial of Service7.5 0.0296 Exploitation Less Likely
High CVE-2024-43483 .NET, .NET Framework, Visual StudioDenial of Service7.5 0.0290 Exploitation Less Likely
High CVE-2024-43506 BranchCacheDenial of Service7.5 0.0230 Exploitation Less Likely
High CVE-2024-43515 Internet Small Computer Systems Interface (iSCSI)Denial of Service7.5 0.0226 Exploitation Less Likely
High CVE-2024-43562 Windows Network Address Translation (NAT)Denial of Service7.5 0.0222 Exploitation Less Likely
High CVE-2024-43565 Windows Network Address Translation (NAT)Denial of Service7.5 0.0222 Exploitation Less Likely
High CVE-2024-38149 BranchCacheDenial of Service7.5 0.0221 Exploitation Less Likely
High CVE-2024-43519 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0150 Exploitation Less Likely
High CVE-2024-43599 Remote Desktop ClientRemote Code Execution8.8 0.0144 Exploitation Less Likely
High CVE-2024-43517 Microsoft ActiveXRemote Code Execution8.8 0.0144 Exploitation Less Likely
High CVE-2024-43550 Windows Secure ChannelSpoofing7.4 0.0109 Exploitation Less Likely
High CVE-2024-43518 Windows Telephony ServerRemote Code Execution8.8 0.0099 Exploitation Less Likely
High CVE-2024-30092 Windows Hyper-VRemote Code Execution8.0 0.0068 Exploitation Less Likely
High CVE-2024-43501 Windows Common Log File System DriverElevation of Privilege7.8 0.0066 Exploitation Less Likely
High CVE-2024-43514 Windows NTFSElevation of Privilege7.8 0.0060 Exploitation Less Likely
High CVE-2024-43535 Windows Kernel-Mode DriversElevation of Privilege7.0 0.0052 Exploitation Less Likely
High CVE-2024-43553 Windows NT OS KernelElevation of Privilege7.4 0.0050 Exploitation Less Likely
High CVE-2024-43563 Windows Ancillary Function Driver for WinSockElevation of Privilege7.8 0.0046 Exploitation Less Likely
Routine CVE-2024-43534 Microsoft Graphics ComponentInformation Disclosure6.5 0.0178 Exploitation Less Likely
Showing 1 to 25 of 33 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.