# KB5028171: July 2023 cumulative update for Windows Server 2022 KB5028171, released July 11, 2023, fixes 99 CVEs across 2 products. 3 of them are being exploited (CVE-2023-36874); 3 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5028171 - Platform: Microsoft - Released: Jul 11, 2023 - Priority: Patch now (Closes CVE-2023-36874, exploited (CISA KEV)) - CVEs: 99, exploited: 3, on CISA KEV: 3 - Vendor advisory: https://support.microsoft.com/help/5028171 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2022](https://patchblox.com/security/data/product/microsoft/windows-server-2022.md) | | 20348.1850 | | [Windows Server 2022 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2022-server-core-installation.md) | | 20348.1850 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2023-36874](https://patchblox.com/security/data/cve/CVE-2023-36874.md) | Patch now | Windows Error Reporting | 7.8 | 0.4256 | CISA KEV | | [CVE-2023-32046](https://patchblox.com/security/data/cve/CVE-2023-32046.md) | Patch now | Windows MSHTML Platform | 7.8 | 0.0997 | CISA KEV | | [CVE-2023-32049](https://patchblox.com/security/data/cve/CVE-2023-32049.md) | Patch now | Windows SmartScreen | 8.8 | 0.0416 | CISA KEV | | [CVE-2022-38023](https://patchblox.com/security/data/cve/CVE-2022-38023.md) | Urgent | Windows Netlogon | 8.1 | 0.0275 | More likely | | [CVE-2023-32057](https://patchblox.com/security/data/cve/CVE-2023-32057.md) | Urgent | Windows Message Queuing | 9.8 | 0.0221 | | | [CVE-2023-35365](https://patchblox.com/security/data/cve/CVE-2023-35365.md) | Urgent | Windows Routing and Remote Access Service (RRAS) | 9.8 | 0.0177 | | | [CVE-2023-35366](https://patchblox.com/security/data/cve/CVE-2023-35366.md) | Urgent | Windows Routing and Remote Access Service (RRAS) | 9.8 | 0.0169 | | | [CVE-2023-35367](https://patchblox.com/security/data/cve/CVE-2023-35367.md) | Urgent | Windows Routing and Remote Access Service (RRAS) | 9.8 | 0.0169 | | | [CVE-2023-35352](https://patchblox.com/security/data/cve/CVE-2023-35352.md) | Urgent | Windows Remote Desktop | 7.5 | 0.0137 | More likely | | [CVE-2023-36871](https://patchblox.com/security/data/cve/CVE-2023-36871.md) | Urgent | Azure Active Directory | 6.5 | 0.0117 | More likely | | [CVE-2023-21526](https://patchblox.com/security/data/cve/CVE-2023-21526.md) | Urgent | Windows Netlogon | 7.4 | 0.0113 | More likely | | [CVE-2023-35297](https://patchblox.com/security/data/cve/CVE-2023-35297.md) | Urgent | Windows PGM | 8.1 | 0.0112 | | | [CVE-2023-35315](https://patchblox.com/security/data/cve/CVE-2023-35315.md) | Urgent | Windows Layer-2 Bridge Network Driver | 8.8 | 0.0068 | | | [CVE-2023-35312](https://patchblox.com/security/data/cve/CVE-2023-35312.md) | Urgent | Windows VOLSNAP.SYS | 7.8 | 0.0049 | More likely | | [CVE-2023-35338](https://patchblox.com/security/data/cve/CVE-2023-35338.md) | High | Windows Peer Name Resolution Protocol | 7.5 | 0.0196 | | | [CVE-2023-35339](https://patchblox.com/security/data/cve/CVE-2023-35339.md) | High | Windows CryptoAPI | 7.5 | 0.0189 | | | [CVE-2023-35330](https://patchblox.com/security/data/cve/CVE-2023-35330.md) | High | Windows SPNEGO Extended Negotiation | 7.5 | 0.0186 | | | [CVE-2023-35325](https://patchblox.com/security/data/cve/CVE-2023-35325.md) | High | Windows Print Spooler Components | 7.5 | 0.0179 | | | [CVE-2023-32084](https://patchblox.com/security/data/cve/CVE-2023-32084.md) | High | Windows HTTP.sys | 7.5 | 0.0178 | | | [CVE-2023-35298](https://patchblox.com/security/data/cve/CVE-2023-35298.md) | High | Windows HTTP.sys | 7.5 | 0.0178 | | | [CVE-2023-32044](https://patchblox.com/security/data/cve/CVE-2023-32044.md) | High | Windows Message Queuing | 7.5 | 0.0152 | | | [CVE-2023-32045](https://patchblox.com/security/data/cve/CVE-2023-32045.md) | High | Windows Message Queuing | 7.5 | 0.0152 | | | [CVE-2023-35303](https://patchblox.com/security/data/cve/CVE-2023-35303.md) | High | Microsoft Windows Codecs Library | 8.8 | 0.0145 | | | [CVE-2023-35302](https://patchblox.com/security/data/cve/CVE-2023-35302.md) | High | Microsoft Printer Drivers | 8.8 | 0.0144 | | | [CVE-2023-35300](https://patchblox.com/security/data/cve/CVE-2023-35300.md) | High | Windows Remote Procedure Call | 8.8 | 0.0139 | | | [CVE-2023-35322](https://patchblox.com/security/data/cve/CVE-2023-35322.md) | High | Windows Deployment Services | 8.8 | 0.0139 | | | [CVE-2023-35317](https://patchblox.com/security/data/cve/CVE-2023-35317.md) | High | Windows Server Update Service | 7.8 | 0.0138 | | | [CVE-2023-32056](https://patchblox.com/security/data/cve/CVE-2023-32056.md) | High | Windows Server Update Service | 7.8 | 0.0124 | | | [CVE-2023-32038](https://patchblox.com/security/data/cve/CVE-2023-32038.md) | High | Windows ODBC Driver | 8.8 | 0.0124 | | | [CVE-2023-35350](https://patchblox.com/security/data/cve/CVE-2023-35350.md) | High | Windows Active Directory Certificate Services | 7.2 | 0.0122 | | | [CVE-2023-35356](https://patchblox.com/security/data/cve/CVE-2023-35356.md) | High | Windows Kernel | 7.8 | 0.0116 | | | [CVE-2023-32054](https://patchblox.com/security/data/cve/CVE-2023-32054.md) | High | Windows Volume Shadow Copy | 7.3 | 0.0091 | | | [CVE-2023-35357](https://patchblox.com/security/data/cve/CVE-2023-35357.md) | High | Windows Kernel | 7.8 | 0.0087 | | | [CVE-2023-35358](https://patchblox.com/security/data/cve/CVE-2023-35358.md) | High | Windows Kernel | 7.8 | 0.0087 | | | [CVE-2023-33154](https://patchblox.com/security/data/cve/CVE-2023-33154.md) | High | Windows Partition Management Driver | 7.8 | 0.0079 | | | [CVE-2023-35309](https://patchblox.com/security/data/cve/CVE-2023-35309.md) | High | Windows Message Queuing | 7.5 | 0.0079 | | | [CVE-2023-35343](https://patchblox.com/security/data/cve/CVE-2023-35343.md) | High | Windows Geolocation Service | 7.8 | 0.0067 | | | [CVE-2023-35313](https://patchblox.com/security/data/cve/CVE-2023-35313.md) | High | Windows Online Certificate Status Protocol (OCSP) SnapIn | 7.8 | 0.0065 | | | [CVE-2023-35323](https://patchblox.com/security/data/cve/CVE-2023-35323.md) | High | Windows Online Certificate Status Protocol (OCSP) SnapIn | 7.8 | 0.0065 | | | [CVE-2023-35364](https://patchblox.com/security/data/cve/CVE-2023-35364.md) | High | Windows NT OS Kernel | 8.8 | 0.0054 | | | [CVE-2023-35353](https://patchblox.com/security/data/cve/CVE-2023-35353.md) | High | Windows Connected User Experiences and Telemetry | 7.8 | 0.0052 | | | [CVE-2023-35347](https://patchblox.com/security/data/cve/CVE-2023-35347.md) | High | Windows App Store | 7.1 | 0.0050 | | | [CVE-2023-35342](https://patchblox.com/security/data/cve/CVE-2023-35342.md) | High | Windows Image Acquisition | 7.8 | 0.0049 | | | [CVE-2023-32053](https://patchblox.com/security/data/cve/CVE-2023-32053.md) | High | Windows Installer | 7.8 | 0.0048 | | | [CVE-2023-35363](https://patchblox.com/security/data/cve/CVE-2023-35363.md) | High | Windows Kernel | 7.8 | 0.0048 | | | [CVE-2023-35320](https://patchblox.com/security/data/cve/CVE-2023-35320.md) | High | Windows Connected User Experiences and Telemetry | 7.8 | 0.0047 | | | [CVE-2023-35337](https://patchblox.com/security/data/cve/CVE-2023-35337.md) | High | Windows Win32K | 7.8 | 0.0044 | | | [CVE-2023-21756](https://patchblox.com/security/data/cve/CVE-2023-21756.md) | High | Microsoft Graphics Component | 7.8 | 0.0043 | | | [CVE-2023-35304](https://patchblox.com/security/data/cve/CVE-2023-35304.md) | High | Windows Kernel | 7.8 | 0.0043 | | | [CVE-2023-35305](https://patchblox.com/security/data/cve/CVE-2023-35305.md) | High | Windows Kernel | 7.8 | 0.0043 | | | [CVE-2023-35328](https://patchblox.com/security/data/cve/CVE-2023-35328.md) | High | Windows Transaction Manager | 7.8 | 0.0043 | | | [CVE-2023-35299](https://patchblox.com/security/data/cve/CVE-2023-35299.md) | High | Windows Common Log File System Driver | 7.8 | 0.0041 | | | [CVE-2023-33163](https://patchblox.com/security/data/cve/CVE-2023-33163.md) | High | Windows Network Load Balancing | 7.5 | 0.0038 | | | [CVE-2023-33155](https://patchblox.com/security/data/cve/CVE-2023-33155.md) | High | Windows Cloud Files Mini Filter Driver | 7.8 | 0.0036 | | | [CVE-2023-35360](https://patchblox.com/security/data/cve/CVE-2023-35360.md) | High | Windows NT OS Kernel | 7.0 | 0.0030 | | | [CVE-2023-35361](https://patchblox.com/security/data/cve/CVE-2023-35361.md) | High | Windows NT OS Kernel | 7.0 | 0.0030 | | | [CVE-2023-35362](https://patchblox.com/security/data/cve/CVE-2023-35362.md) | High | Windows Clip Service | 7.8 | 0.0029 | | | [CVE-2023-35340](https://patchblox.com/security/data/cve/CVE-2023-35340.md) | High | Windows CNG Key Isolation Service | 7.8 | 0.0027 | | | [CVE-2023-35329](https://patchblox.com/security/data/cve/CVE-2023-35329.md) | Routine | Windows Authentication Methods | 6.5 | 0.0182 | | | [CVE-2023-32034](https://patchblox.com/security/data/cve/CVE-2023-32034.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-32035](https://patchblox.com/security/data/cve/CVE-2023-32035.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-33166](https://patchblox.com/security/data/cve/CVE-2023-33166.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-33167](https://patchblox.com/security/data/cve/CVE-2023-33167.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-33168](https://patchblox.com/security/data/cve/CVE-2023-33168.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-33169](https://patchblox.com/security/data/cve/CVE-2023-33169.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-33172](https://patchblox.com/security/data/cve/CVE-2023-33172.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-33173](https://patchblox.com/security/data/cve/CVE-2023-33173.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-33164](https://patchblox.com/security/data/cve/CVE-2023-33164.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-35314](https://patchblox.com/security/data/cve/CVE-2023-35314.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-35318](https://patchblox.com/security/data/cve/CVE-2023-35318.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-35319](https://patchblox.com/security/data/cve/CVE-2023-35319.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-32083](https://patchblox.com/security/data/cve/CVE-2023-32083.md) | Routine | Windows Failover Cluster | 6.5 | 0.0159 | | | [CVE-2023-35321](https://patchblox.com/security/data/cve/CVE-2023-35321.md) | Routine | Windows Deployment Services | 6.5 | 0.0156 | | | [CVE-2023-35296](https://patchblox.com/security/data/cve/CVE-2023-35296.md) | Routine | Microsoft Printer Drivers | 6.5 | 0.0153 | | | [CVE-2023-35316](https://patchblox.com/security/data/cve/CVE-2023-35316.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0140 | | | [CVE-2023-32042](https://patchblox.com/security/data/cve/CVE-2023-32042.md) | Routine | Windows OLE | 6.5 | 0.0134 | | | [CVE-2023-35308](https://patchblox.com/security/data/cve/CVE-2023-35308.md) | Routine | Windows MSHTML Platform | 6.5 | 0.0111 | | | [CVE-2023-35348](https://patchblox.com/security/data/cve/CVE-2023-35348.md) | Routine | Azure Active Directory | 6.5 | 0.0103 | | | [CVE-2023-32033](https://patchblox.com/security/data/cve/CVE-2023-32033.md) | Routine | Windows Cluster Server | 6.6 | 0.0094 | | | [CVE-2023-35336](https://patchblox.com/security/data/cve/CVE-2023-35336.md) | Routine | Windows MSHTML Platform | 6.5 | 0.0092 | | | [CVE-2023-35331](https://patchblox.com/security/data/cve/CVE-2023-35331.md) | Routine | Windows Local Security Authority (LSA) | 6.5 | 0.0072 | | | [CVE-2023-35344](https://patchblox.com/security/data/cve/CVE-2023-35344.md) | Routine | Role: DNS Server | 6.6 | 0.0070 | | | [CVE-2023-35345](https://patchblox.com/security/data/cve/CVE-2023-35345.md) | Routine | Role: DNS Server | 6.6 | 0.0070 | | | [CVE-2023-35346](https://patchblox.com/security/data/cve/CVE-2023-35346.md) | Routine | Role: DNS Server | 6.6 | 0.0070 | | | [CVE-2023-35351](https://patchblox.com/security/data/cve/CVE-2023-35351.md) | Routine | Windows Active Directory Certificate Services | 6.6 | 0.0070 | | | [CVE-2023-33174](https://patchblox.com/security/data/cve/CVE-2023-33174.md) | Routine | Windows Cryptographic Services | 5.5 | 0.0068 | | | [CVE-2023-35310](https://patchblox.com/security/data/cve/CVE-2023-35310.md) | Routine | Role: DNS Server | 6.6 | 0.0066 | | | [CVE-2023-32037](https://patchblox.com/security/data/cve/CVE-2023-32037.md) | Routine | Windows Layer 2 Tunneling Protocol | 6.5 | 0.0066 | | | [CVE-2023-32041](https://patchblox.com/security/data/cve/CVE-2023-32041.md) | Routine | Windows Update Orchestrator Service | 5.5 | 0.0064 | | | [CVE-2023-32039](https://patchblox.com/security/data/cve/CVE-2023-32039.md) | Routine | Microsoft Printer Drivers | 5.5 | 0.0052 | | | [CVE-2023-32040](https://patchblox.com/security/data/cve/CVE-2023-32040.md) | Routine | Microsoft Printer Drivers | 5.5 | 0.0052 | | | [CVE-2023-32085](https://patchblox.com/security/data/cve/CVE-2023-32085.md) | Routine | Microsoft Printer Drivers | 5.5 | 0.0052 | | | [CVE-2023-35306](https://patchblox.com/security/data/cve/CVE-2023-35306.md) | Routine | Microsoft Printer Drivers | 5.5 | 0.0052 | | | [CVE-2023-35324](https://patchblox.com/security/data/cve/CVE-2023-35324.md) | Routine | Microsoft Printer Drivers | 5.5 | 0.0052 | | | [CVE-2023-35326](https://patchblox.com/security/data/cve/CVE-2023-35326.md) | Routine | Windows CDP User Components | 5.5 | 0.0052 | | | [CVE-2023-32043](https://patchblox.com/security/data/cve/CVE-2023-32043.md) | Routine | Windows Remote Desktop | 6.8 | 0.0051 | | | [CVE-2023-35341](https://patchblox.com/security/data/cve/CVE-2023-35341.md) | Routine | Windows Media | 6.2 | 0.0050 | | | [CVE-2023-35332](https://patchblox.com/security/data/cve/CVE-2023-35332.md) | Routine | Windows Remote Desktop | 6.8 | 0.0050 | | | [CVE-2023-32055](https://patchblox.com/security/data/cve/CVE-2023-32055.md) | Routine | Windows Active Template Library | 6.7 | 0.0036 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo