# KB5027223: June 2023 cumulative update for Windows 11 21H2

KB5027223, released June 13, 2023, fixes 29 CVEs across 2 products. One of them is being exploited (CVE-2023-29360); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

- Web page: https://patchblox.com/security/fix/microsoft/kb5027223
- Platform: Microsoft
- Released: Jun 13, 2023
- Priority: Patch now (Closes CVE-2023-29360, exploited (CISA KEV))
- CVEs: 29, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://support.microsoft.com/help/5027223

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Windows 11 version 21H2 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-21h2-for-arm64-based-systems.md) |  | 22000.2057 |
| [Windows 11 version 21H2 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-21h2-for-x64-based-systems.md) |  | 22000.2057 |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2023-29360](https://patchblox.com/security/data/cve/CVE-2023-29360.md) | Patch now | Microsoft Streaming Service | 8.4 | 0.2162 | CISA KEV |
| [CVE-2023-29371](https://patchblox.com/security/data/cve/CVE-2023-29371.md) | Urgent | Windows Win32K | 7.8 | 0.0539 | More likely |
| [CVE-2023-29358](https://patchblox.com/security/data/cve/CVE-2023-29358.md) | Urgent | Windows GDI | 7.8 | 0.0473 | More likely |
| [CVE-2023-29361](https://patchblox.com/security/data/cve/CVE-2023-29361.md) | Urgent | Windows Cloud Files Mini Filter Driver | 7.0 | 0.0398 | More likely |
| [CVE-2023-32015](https://patchblox.com/security/data/cve/CVE-2023-32015.md) | Urgent | Windows PGM | 9.8 | 0.0204 |  |
| [CVE-2023-29363](https://patchblox.com/security/data/cve/CVE-2023-29363.md) | Urgent | Windows PGM | 9.8 | 0.0194 |  |
| [CVE-2023-32014](https://patchblox.com/security/data/cve/CVE-2023-32014.md) | Urgent | Windows PGM | 9.8 | 0.0194 |  |
| [CVE-2023-32013](https://patchblox.com/security/data/cve/CVE-2023-32013.md) | Urgent | Windows Hyper-V | 5.3 | 0.0164 |  |
| [CVE-2023-29359](https://patchblox.com/security/data/cve/CVE-2023-29359.md) | Urgent | Windows Win32K | 7.8 | 0.0055 | More likely |
| [CVE-2023-32011](https://patchblox.com/security/data/cve/CVE-2023-32011.md) | High | Windows iSCSI | 7.5 | 0.0194 |  |
| [CVE-2023-29351](https://patchblox.com/security/data/cve/CVE-2023-29351.md) | High | Windows Group Policy | 8.1 | 0.0181 |  |
| [CVE-2023-29362](https://patchblox.com/security/data/cve/CVE-2023-29362.md) | High | Remote Desktop Client | 8.8 | 0.0135 |  |
| [CVE-2023-29372](https://patchblox.com/security/data/cve/CVE-2023-29372.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0135 |  |
| [CVE-2023-29373](https://patchblox.com/security/data/cve/CVE-2023-29373.md) | High | Windows ODBC Driver | 8.8 | 0.0135 |  |
| [CVE-2023-29365](https://patchblox.com/security/data/cve/CVE-2023-29365.md) | High | Microsoft Windows Codecs Library | 7.8 | 0.0072 |  |
| [CVE-2023-29366](https://patchblox.com/security/data/cve/CVE-2023-29366.md) | High | Windows Geolocation Service | 7.8 | 0.0072 |  |
| [CVE-2023-29370](https://patchblox.com/security/data/cve/CVE-2023-29370.md) | High | Microsoft Windows Codecs Library | 7.8 | 0.0072 |  |
| [CVE-2023-32008](https://patchblox.com/security/data/cve/CVE-2023-32008.md) | High | Windows Resilient File System (ReFS) | 7.8 | 0.0072 |  |
| [CVE-2023-32012](https://patchblox.com/security/data/cve/CVE-2023-32012.md) | High | Windows Container Manager Service | 7.8 | 0.0051 |  |
| [CVE-2023-32017](https://patchblox.com/security/data/cve/CVE-2023-32017.md) | High | Microsoft Printer Drivers | 7.8 | 0.0050 |  |
| [CVE-2023-29346](https://patchblox.com/security/data/cve/CVE-2023-29346.md) | High | Windows NTFS | 7.8 | 0.0049 |  |
| [CVE-2023-32009](https://patchblox.com/security/data/cve/CVE-2023-32009.md) | High | Windows Collaborative Translation Framework | 8.8 | 0.0043 |  |
| [CVE-2023-29364](https://patchblox.com/security/data/cve/CVE-2023-29364.md) | High | Windows Authentication Methods | 7.0 | 0.0037 |  |
| [CVE-2023-29368](https://patchblox.com/security/data/cve/CVE-2023-29368.md) | High | Windows Filtering | 7.0 | 0.0037 |  |
| [CVE-2023-24937](https://patchblox.com/security/data/cve/CVE-2023-24937.md) | Routine | Windows CryptoAPI | 6.5 | 0.0208 |  |
| [CVE-2023-24938](https://patchblox.com/security/data/cve/CVE-2023-24938.md) | Routine | Windows CryptoAPI | 6.5 | 0.0199 |  |
| [CVE-2023-32019](https://patchblox.com/security/data/cve/CVE-2023-32019.md) | Routine | Windows Kernel | 4.7 | 0.0137 |  |
| [CVE-2023-29352](https://patchblox.com/security/data/cve/CVE-2023-29352.md) | Routine | Remote Desktop Client | 6.5 | 0.0117 |  |
| [CVE-2023-32016](https://patchblox.com/security/data/cve/CVE-2023-32016.md) | Routine | Windows Installer | 5.5 | 0.0067 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo
