# KB5004299: July 2021 security update KB5004299, released July 13, 2021, fixes 34 CVEs across 4 products. One of them is being exploited (CVE-2021-31979); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5004299 - Platform: Microsoft - Released: Jul 13, 2021 - Priority: Patch now (Closes CVE-2021-31979, exploited (CISA KEV)) - CVEs: 34, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://support.microsoft.com/help/5004299 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2008 for 32-bit Systems Service Pack 2](https://patchblox.com/security/data/product/microsoft/windows-server-2008-for-32-bit-systems-service-pack-2.md) | | | | [Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2008-for-32-bit-systems-service-pack-2-server-core-installation.md) | | | | [Windows Server 2008 for x64-based Systems Service Pack 2](https://patchblox.com/security/data/product/microsoft/windows-server-2008-for-x64-based-systems-service-pack-2.md) | | | | [Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2008-for-x64-based-systems-service-pack-2-server-core-installation.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2021-31979](https://patchblox.com/security/data/cve/CVE-2021-31979.md) | Patch now | Windows Kernel | 7.8 | 0.0454 | CISA KEV | | [CVE-2021-34494](https://patchblox.com/security/data/cve/CVE-2021-34494.md) | Urgent | Role: DNS Server | 8.8 | 0.0405 | | | [CVE-2021-33780](https://patchblox.com/security/data/cve/CVE-2021-33780.md) | Urgent | Role: DNS Server | 8.8 | 0.0271 | More likely | | [CVE-2020-17049](https://patchblox.com/security/data/cve/CVE-2020-17049.md) | High | Microsoft Windows | 7.2 | 0.1379 | | | [CVE-2021-31183](https://patchblox.com/security/data/cve/CVE-2021-31183.md) | High | Windows TCP/IP | 7.5 | 0.0384 | | | [CVE-2021-34504](https://patchblox.com/security/data/cve/CVE-2021-34504.md) | High | Windows Address Book | 7.8 | 0.0347 | | | [CVE-2021-33788](https://patchblox.com/security/data/cve/CVE-2021-33788.md) | High | Windows Local Security Authority Subsystem Service (LSASS) | 7.5 | 0.0328 | | | [CVE-2021-34476](https://patchblox.com/security/data/cve/CVE-2021-34476.md) | High | Common Internet File System | 7.5 | 0.0328 | | | [CVE-2021-34442](https://patchblox.com/security/data/cve/CVE-2021-34442.md) | High | Role: DNS Server | 8.8 | 0.0317 | | | [CVE-2021-34492](https://patchblox.com/security/data/cve/CVE-2021-34492.md) | High | Windows PFX Encryption | 8.1 | 0.0247 | Disclosed | | [CVE-2021-33749](https://patchblox.com/security/data/cve/CVE-2021-33749.md) | High | Role: DNS Server | 8.8 | 0.0242 | | | [CVE-2021-33750](https://patchblox.com/security/data/cve/CVE-2021-33750.md) | High | Role: DNS Server | 8.8 | 0.0242 | | | [CVE-2021-33752](https://patchblox.com/security/data/cve/CVE-2021-33752.md) | High | Role: DNS Server | 8.8 | 0.0242 | | | [CVE-2021-33756](https://patchblox.com/security/data/cve/CVE-2021-33756.md) | High | Role: DNS Server | 8.8 | 0.0241 | | | [CVE-2021-34441](https://patchblox.com/security/data/cve/CVE-2021-34441.md) | High | Microsoft Windows Media Foundation | 7.8 | 0.0222 | | | [CVE-2021-33786](https://patchblox.com/security/data/cve/CVE-2021-33786.md) | High | Windows Local Security Authority Subsystem Service (LSASS) | 8.1 | 0.0212 | | | [CVE-2021-33746](https://patchblox.com/security/data/cve/CVE-2021-33746.md) | High | Microsoft Windows DNS | 8.0 | 0.0200 | | | [CVE-2021-33754](https://patchblox.com/security/data/cve/CVE-2021-33754.md) | High | Microsoft Windows DNS | 8.0 | 0.0198 | | | [CVE-2021-34516](https://patchblox.com/security/data/cve/CVE-2021-34516.md) | High | Windows Win32K | 7.8 | 0.0130 | | | [CVE-2021-34498](https://patchblox.com/security/data/cve/CVE-2021-34498.md) | High | Microsoft Graphics Component | 7.8 | 0.0106 | | | [CVE-2021-34514](https://patchblox.com/security/data/cve/CVE-2021-34514.md) | High | Windows Kernel | 7.8 | 0.0070 | | | [CVE-2021-34511](https://patchblox.com/security/data/cve/CVE-2021-34511.md) | High | Windows Installer | 7.8 | 0.0057 | | | [CVE-2021-34444](https://patchblox.com/security/data/cve/CVE-2021-34444.md) | Routine | Role: DNS Server | 6.5 | 0.0346 | | | [CVE-2021-34507](https://patchblox.com/security/data/cve/CVE-2021-34507.md) | Routine | Windows Remote Assistance | 6.5 | 0.0326 | | | [CVE-2021-33764](https://patchblox.com/security/data/cve/CVE-2021-33764.md) | Routine | Windows Key Distribution Center | 5.9 | 0.0305 | | | [CVE-2021-33757](https://patchblox.com/security/data/cve/CVE-2021-33757.md) | Routine | Windows Security Account Manager | 5.3 | 0.0295 | | | [CVE-2021-33745](https://patchblox.com/security/data/cve/CVE-2021-33745.md) | Routine | Role: DNS Server | 6.5 | 0.0287 | | | [CVE-2021-34499](https://patchblox.com/security/data/cve/CVE-2021-34499.md) | Routine | Microsoft Windows DNS | 6.5 | 0.0287 | | | [CVE-2021-33783](https://patchblox.com/security/data/cve/CVE-2021-33783.md) | Routine | Windows SMB | 6.5 | 0.0277 | | | [CVE-2021-33782](https://patchblox.com/security/data/cve/CVE-2021-33782.md) | Routine | Windows Authenticode | 5.5 | 0.0225 | | | [CVE-2021-34496](https://patchblox.com/security/data/cve/CVE-2021-34496.md) | Routine | Microsoft Graphics Component | 5.5 | 0.0204 | | | [CVE-2021-34440](https://patchblox.com/security/data/cve/CVE-2021-34440.md) | Routine | Microsoft Graphics Component | 5.5 | 0.0088 | | | [CVE-2021-34457](https://patchblox.com/security/data/cve/CVE-2021-34457.md) | Routine | Windows Remote Access Connection Manager | 5.5 | 0.0087 | | | [CVE-2021-33765](https://patchblox.com/security/data/cve/CVE-2021-33765.md) | Routine | Windows Installer | 6.2 | 0.0073 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo