The remote Windows host is missing security update 5037765 or 5039705. It is, therefore, affected by multiple vulnerabilities

  - Windows MSHTML Platform Security Feature Bypass Vulnerability (CVE-2024-30040)

  - Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVE-2024-29996,     CVE-2024-30025, CVE-2024-30037)

  - Windows Mobile Broadband Driver Remote Code Execution Vulnerability (CVE-2024-29997, CVE-2024-29998,     CVE-2024-29999, CVE-2024-30000, CVE-2024-30001, CVE-2024-30002, CVE-2024-30003, CVE-2024-30004,     CVE-2024-30005, CVE-2024-30012, CVE-2024-30021)

Due to issues with the originally published patch (KB5037765), Microsoft has released KB5039705 as an Out-of-Bounds (OOB) patch.
While the OOB patch does not include any new security fixes relative to KB5037765, it may be required if KB5037765 fails to install.
Please review the links provided in the See Also section for additional guidance.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

KB5037765: Windows 10 version 1809 / Windows Server 2019 Security Update (May 2024)

high Nessus Plugin ID 197006

Version 1.3