fr en

Windows · Fixed build

10.0.20348.2159

18 CVEs fixed by this build, deployed across 1 Windows SKUs.

Published on: 2019-07-09
SKUs covered: 1
CVEs fixed: 18

Windows SKUs covered by this build

The SKUs below share this MSRC build number. Deploying the corresponding KB secures all of them at once.

Windows Server 2022 (Server Core installation)

CISA KEV: 0
Critical: 3
High: 15
NVD pending: 0

CVEs fixed by this build

CVE	Severity	KEV	Published	Description
CVE-2023-36006 2023-12-12 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	2023-12-12	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-35639 2023-12-12 Microsoft ODBC Driver Remote Code Execution Vulnerability	HIGH 8.8	—	2023-12-12	Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2023-35641 2023-12-12 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability	CRITICAL 8.8	—	2023-12-12	Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
CVE-2023-35630 2023-12-12 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability	CRITICAL 8.8	—	2023-12-12	Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
CVE-2023-35628 2023-12-12 Windows MSHTML Platform Remote Code Execution Vulnerability	CRITICAL 8.1	—	2023-12-12	Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2023-36696 2023-12-12 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability	HIGH 7.8	—	2023-12-12	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2023-36011 2023-12-12 Win32k Elevation of Privilege Vulnerability	HIGH 7.8	—	2023-12-12	Win32k Elevation of Privilege Vulnerability
CVE-2023-21740 2023-12-12 Windows Media Remote Code Execution Vulnerability	HIGH 7.8	—	2023-12-12	Windows Media Remote Code Execution Vulnerability
CVE-2023-35644 2023-12-12 Windows Sysmain Service Elevation of Privilege Vulnerability	HIGH 7.8	—	2023-12-12	Windows Sysmain Service Elevation of Privilege Vulnerability
CVE-2023-36004 2023-12-12 Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability	HIGH 7.5	—	2023-12-12	Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability
CVE-2023-36005 2023-12-12 Windows Telephony Server Elevation of Privilege Vulnerability	HIGH 7.5	—	2023-12-12	Windows Telephony Server Elevation of Privilege Vulnerability
CVE-2023-35638 2023-12-12 DHCP Server Service Denial of Service Vulnerability	HIGH 7.5	—	2023-12-12	DHCP Server Service Denial of Service Vulnerability
CVE-2023-35643 2023-12-12 DHCP Server Service Information Disclosure Vulnerability	HIGH 7.5	—	2023-12-12	DHCP Server Service Information Disclosure Vulnerability
CVE-2023-35622 2023-12-12 Windows DNS Spoofing Vulnerability	HIGH 7.5	—	2023-12-12	Windows DNS Spoofing Vulnerability
CVE-2023-36003 2023-12-12 XAML Diagnostics Elevation of Privilege Vulnerability	HIGH 6.7	—	2023-12-12	XAML Diagnostics Elevation of Privilege Vulnerability
CVE-2023-35642 2023-12-12 Internet Connection Sharing (ICS) Denial of Service Vulnerability	HIGH 6.5	—	2023-12-12	Internet Connection Sharing (ICS) Denial of Service Vulnerability
CVE-2023-36012 2023-12-12 DHCP Server Service Information Disclosure Vulnerability	HIGH 5.3	—	2023-12-12	DHCP Server Service Information Disclosure Vulnerability
CVE-2023-20588 2023-12-12 AMD: CVE-2023-20588 AMD Speculative Leaks Security Notice	HIGH	—	2023-12-12	AMD: CVE-2023-20588 AMD Speculative Leaks Security Notice