Windows · Build corrective · Tous les builds Windows

10.0.20348.2322

La build Windows 10.0.20348.2322, publiée le 2024-02-13, corrige 40 CVE, dont 3 activement exploitées (CISA KEV), déployée sur 2 SKU.

Publiée le: 2024-02-13
SKU couvertes: 2
CVE corrigées: 40
KEV CISA: 3

SKU Windows couvertes par cette build

Les SKU ci-dessous partagent ce numéro de build MSRC. Pousser la KB correspondante les sécurise toutes simultanément.

CVE corrigées par cette build

CVE	Sévérité	KEV	Publié
CVE-2024-21412 HIGH 8.1 KEV 2024-02-13 Internet Shortcut Files Security Feature Bypass Vulnerability	HIGH 8.1	KEV	2024-02-13
CVE-2024-21338 HIGH 7.8 KEV 2024-02-13 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.8	KEV	2024-02-13
CVE-2024-21351 HIGH 7.6 KEV 2024-02-13 Windows SmartScreen Security Feature Bypass Vulnerability	HIGH 7.6	KEV	2024-02-13
CVE-2024-21420 HIGH 8.8 2024-02-13 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	2024-02-13
CVE-2024-21391 HIGH 8.8 2024-02-13 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	2024-02-13
CVE-2024-21375 HIGH 8.8 2024-02-13 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	2024-02-13
CVE-2024-21369 HIGH 8.8 2024-02-13 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	2024-02-13
CVE-2024-21372 HIGH 8.8 2024-02-13 Windows OLE Remote Code Execution Vulnerability	HIGH 8.8	—	2024-02-13
CVE-2024-21367 HIGH 8.8 2024-02-13 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	2024-02-13
CVE-2024-21368 HIGH 8.8 2024-02-13 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	2024-02-13
CVE-2024-21370 HIGH 8.8 2024-02-13 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	2024-02-13
CVE-2024-21361 HIGH 8.8 2024-02-13 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	2024-02-13
CVE-2024-21366 HIGH 8.8 2024-02-13 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	2024-02-13
CVE-2024-21365 HIGH 8.8 2024-02-13 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	2024-02-13
CVE-2024-21358 HIGH 8.8 2024-02-13 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	2024-02-13
CVE-2024-21360 HIGH 8.8 2024-02-13 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	2024-02-13
CVE-2024-21359 HIGH 8.8 2024-02-13 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	2024-02-13
CVE-2024-21350 HIGH 8.8 2024-02-13 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	2024-02-13
CVE-2024-21352 HIGH 8.8 2024-02-13 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability	HIGH 8.8	—	2024-02-13
CVE-2024-21349 HIGH 8.8 2024-02-13 Microsoft ActiveX Data Objects Remote Code Execution Vulnerability	HIGH 8.8	—	2024-02-13
CVE-2024-21357 HIGH 8.1 2024-02-13 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability	HIGH 8.1	—	2024-02-13
CVE-2024-21363 HIGH 7.8 2024-02-13 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability	HIGH 7.8	—	2024-02-13
CVE-2024-21354 HIGH 7.8 2024-02-13 Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability	HIGH 7.8	—	2024-02-13
CVE-2024-21406 HIGH 7.5 2024-02-13 Windows Printing Service Spoofing Vulnerability	HIGH 7.5	—	2024-02-13
CVE-2024-21347 HIGH 7.5 2024-02-13 Microsoft ODBC Driver Remote Code Execution Vulnerability	HIGH 7.5	—	2024-02-13
CVE-2024-21348 HIGH 7.5 2024-02-13 Internet Connection Sharing (ICS) Denial of Service Vulnerability	HIGH 7.5	—	2024-02-13
CVE-2024-21405 HIGH 7.0 2024-02-13 Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability	HIGH 7.0	—	2024-02-13
CVE-2024-21371 HIGH 7.0 2024-02-13 Windows Kernel Elevation of Privilege Vulnerability	HIGH 7.0	—	2024-02-13
CVE-2024-21355 HIGH 7.0 2024-02-13 Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability	HIGH 7.0	—	2024-02-13
CVE-2024-21341 MEDIUM 6.8 2024-02-13 Windows Kernel Remote Code Execution Vulnerability	MEDIUM 6.8	—	2024-02-13
CVE-2024-21356 MEDIUM 6.5 2024-02-13 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability	MEDIUM 6.5	—	2024-02-13
CVE-2024-20684 MEDIUM 6.5 2024-02-13 Windows Hyper-V Denial of Service Vulnerability	MEDIUM 6.5	—	2024-02-13
CVE-2024-21339 MEDIUM 6.4 2024-02-13 Windows USB Generic Parent Driver Remote Code Execution Vulnerability	MEDIUM 6.4	—	2024-02-13
CVE-2024-21344 MEDIUM 5.9 2024-02-13 Windows Network Address Translation (NAT) Denial of Service Vulnerability	MEDIUM 5.9	—	2024-02-13
CVE-2024-21343 MEDIUM 5.9 2024-02-13 Windows Network Address Translation (NAT) Denial of Service Vulnerability	MEDIUM 5.9	—	2024-02-13
CVE-2024-21377 MEDIUM 5.5 2024-02-13 Windows DNS Information Disclosure Vulnerability	MEDIUM 5.5	—	2024-02-13
CVE-2024-21362 MEDIUM 5.5 2024-02-13 Windows Kernel Security Feature Bypass Vulnerability	MEDIUM 5.5	—	2024-02-13
CVE-2024-21340 MEDIUM 4.6 2024-02-13 Windows Kernel Information Disclosure Vulnerability	MEDIUM 4.6	—	2024-02-13
CVE-2024-21304 MEDIUM 4.1 2024-02-13 Trusted Compute Base Elevation of Privilege Vulnerability	MEDIUM 4.1	—	2024-02-13
CVE-2023-50387 HIGH 2024-02-13 MITRE: CVE-2023-50387 DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers	HIGH	—	2024-02-13

Déployer ce correctif Windows sur votre flotte

Appaloosa pousse les mises à jour Windows et vérifie leur application sur tout votre parc.

Gérer Windows avec Appaloosa