KB5044281

Microsoft security update released 2024-10-08. Fixes 66 CVEs.

CriticalCISA KEV

Download KB5044281

Get the official update for KB5044281. The download and file size for each supported product are on the Microsoft Update Catalog page.

Microsoft Update Catalog: download KB5044281 Microsoft support article

Update summary

Released

2024-10-08

CVEs fixed

Max CVSS

9.0

Severity

Critical

Exploitation and severity

Fixes 66 CVEs. At least one is actively exploited (CISA KEV). Most severe CVSS 9.0 (Critical). EPSS exploit probability up to 61%.

Among the top 25% of tracked Microsoft updates by EPSS exploit probability.

What to do

Treat as urgent: it is being exploited in the wild (CISA KEV), so patch ahead of items that are not. Senserva flags whether KB5044281 is missing on your devices.

CVEs fixed by this update

CVE-2024-20659 CVE-2024-30092 CVE-2024-37976 CVE-2024-37979 CVE-2024-37982 CVE-2024-37983 CVE-2024-38124 CVE-2024-38149 CVE-2024-38202 CVE-2024-38212 CVE-2024-38261 CVE-2024-38262 CVE-2024-38265 CVE-2024-43453 CVE-2024-43456 CVE-2024-43501 CVE-2024-43506 CVE-2024-43509 CVE-2024-43512 CVE-2024-43514 CVE-2024-43515 CVE-2024-43517 CVE-2024-43518 CVE-2024-43519 CVE-2024-43520 CVE-2024-43521 CVE-2024-43529 CVE-2024-43532 CVE-2024-43533 CVE-2024-43534 CVE-2024-43535 CVE-2024-43541 CVE-2024-43544 CVE-2024-43545 CVE-2024-43546 CVE-2024-43547 CVE-2024-43549 CVE-2024-43550 CVE-2024-43551 CVE-2024-43553 CVE-2024-43554 CVE-2024-43556 CVE-2024-43560 CVE-2024-43562 CVE-2024-43563 CVE-2024-43564 CVE-2024-43565 CVE-2024-43567 CVE-2024-43570 CVE-2024-43572 CVE-2024-43573 CVE-2024-43574 CVE-2024-43575 CVE-2024-43581 CVE-2024-43582 CVE-2024-43584 CVE-2024-43585 CVE-2024-43589 CVE-2024-43592 CVE-2024-43593 CVE-2024-43599 CVE-2024-43607 CVE-2024-43608 CVE-2024-43611 CVE-2024-43615 CVE-2024-6197

Affected products

Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server 2022

References

Microsoft support article Microsoft Security Update Guide

See this and every Microsoft update ranked by real-world risk on the Microsoft Patch Tracker.