# KB5028228: July 2023 security update KB5028228, released July 11, 2023, fixes 70 CVEs across 2 products. 2 of them are being exploited (CVE-2023-36874); 2 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5028228 - Platform: Microsoft - Released: Jul 11, 2023 - Priority: Patch now (Closes CVE-2023-36874, exploited (CISA KEV)) - CVEs: 70, exploited: 2, on CISA KEV: 2 - Vendor advisory: https://support.microsoft.com/help/5028228 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2012 R2](https://patchblox.com/security/data/product/microsoft/windows-server-2012-r2.md) | | | | [Windows Server 2012 R2 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2012-r2-server-core-installation.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2023-36874](https://patchblox.com/security/data/cve/CVE-2023-36874.md) | Patch now | Windows Error Reporting | 7.8 | 0.4256 | CISA KEV | | [CVE-2023-32046](https://patchblox.com/security/data/cve/CVE-2023-32046.md) | Patch now | Windows MSHTML Platform | 7.8 | 0.0997 | CISA KEV | | [CVE-2022-38023](https://patchblox.com/security/data/cve/CVE-2022-38023.md) | Urgent | Windows Netlogon | 8.1 | 0.0275 | More likely | | [CVE-2023-32057](https://patchblox.com/security/data/cve/CVE-2023-32057.md) | Urgent | Windows Message Queuing | 9.8 | 0.0221 | | | [CVE-2023-35365](https://patchblox.com/security/data/cve/CVE-2023-35365.md) | Urgent | Windows Routing and Remote Access Service (RRAS) | 9.8 | 0.0177 | | | [CVE-2023-35366](https://patchblox.com/security/data/cve/CVE-2023-35366.md) | Urgent | Windows Routing and Remote Access Service (RRAS) | 9.8 | 0.0169 | | | [CVE-2023-35367](https://patchblox.com/security/data/cve/CVE-2023-35367.md) | Urgent | Windows Routing and Remote Access Service (RRAS) | 9.8 | 0.0169 | | | [CVE-2023-35352](https://patchblox.com/security/data/cve/CVE-2023-35352.md) | Urgent | Windows Remote Desktop | 7.5 | 0.0137 | More likely | | [CVE-2023-21526](https://patchblox.com/security/data/cve/CVE-2023-21526.md) | Urgent | Windows Netlogon | 7.4 | 0.0113 | More likely | | [CVE-2023-35297](https://patchblox.com/security/data/cve/CVE-2023-35297.md) | Urgent | Windows PGM | 8.1 | 0.0112 | | | [CVE-2023-35312](https://patchblox.com/security/data/cve/CVE-2023-35312.md) | Urgent | Windows VOLSNAP.SYS | 7.8 | 0.0049 | More likely | | [CVE-2023-35338](https://patchblox.com/security/data/cve/CVE-2023-35338.md) | High | Windows Peer Name Resolution Protocol | 7.5 | 0.0196 | | | [CVE-2023-35330](https://patchblox.com/security/data/cve/CVE-2023-35330.md) | High | Windows SPNEGO Extended Negotiation | 7.5 | 0.0186 | | | [CVE-2023-35325](https://patchblox.com/security/data/cve/CVE-2023-35325.md) | High | Windows Print Spooler Components | 7.5 | 0.0179 | | | [CVE-2023-32044](https://patchblox.com/security/data/cve/CVE-2023-32044.md) | High | Windows Message Queuing | 7.5 | 0.0152 | | | [CVE-2023-32045](https://patchblox.com/security/data/cve/CVE-2023-32045.md) | High | Windows Message Queuing | 7.5 | 0.0152 | | | [CVE-2023-35303](https://patchblox.com/security/data/cve/CVE-2023-35303.md) | High | Microsoft Windows Codecs Library | 8.8 | 0.0145 | | | [CVE-2023-35302](https://patchblox.com/security/data/cve/CVE-2023-35302.md) | High | Microsoft Printer Drivers | 8.8 | 0.0144 | | | [CVE-2023-35300](https://patchblox.com/security/data/cve/CVE-2023-35300.md) | High | Windows Remote Procedure Call | 8.8 | 0.0139 | | | [CVE-2023-35322](https://patchblox.com/security/data/cve/CVE-2023-35322.md) | High | Windows Deployment Services | 8.8 | 0.0139 | | | [CVE-2023-35317](https://patchblox.com/security/data/cve/CVE-2023-35317.md) | High | Windows Server Update Service | 7.8 | 0.0138 | | | [CVE-2023-32038](https://patchblox.com/security/data/cve/CVE-2023-32038.md) | High | Windows ODBC Driver | 8.8 | 0.0124 | | | [CVE-2023-35350](https://patchblox.com/security/data/cve/CVE-2023-35350.md) | High | Windows Active Directory Certificate Services | 7.2 | 0.0122 | | | [CVE-2023-33154](https://patchblox.com/security/data/cve/CVE-2023-33154.md) | High | Windows Partition Management Driver | 7.8 | 0.0079 | | | [CVE-2023-35309](https://patchblox.com/security/data/cve/CVE-2023-35309.md) | High | Windows Message Queuing | 7.5 | 0.0079 | | | [CVE-2023-35342](https://patchblox.com/security/data/cve/CVE-2023-35342.md) | High | Windows Image Acquisition | 7.8 | 0.0049 | | | [CVE-2023-32053](https://patchblox.com/security/data/cve/CVE-2023-32053.md) | High | Windows Installer | 7.8 | 0.0048 | | | [CVE-2023-21756](https://patchblox.com/security/data/cve/CVE-2023-21756.md) | High | Microsoft Graphics Component | 7.8 | 0.0043 | | | [CVE-2023-35328](https://patchblox.com/security/data/cve/CVE-2023-35328.md) | High | Windows Transaction Manager | 7.8 | 0.0043 | | | [CVE-2023-35299](https://patchblox.com/security/data/cve/CVE-2023-35299.md) | High | Windows Common Log File System Driver | 7.8 | 0.0041 | | | [CVE-2023-33163](https://patchblox.com/security/data/cve/CVE-2023-33163.md) | High | Windows Network Load Balancing | 7.5 | 0.0038 | | | [CVE-2023-35360](https://patchblox.com/security/data/cve/CVE-2023-35360.md) | High | Windows NT OS Kernel | 7.0 | 0.0030 | | | [CVE-2023-35361](https://patchblox.com/security/data/cve/CVE-2023-35361.md) | High | Windows NT OS Kernel | 7.0 | 0.0030 | | | [CVE-2023-35340](https://patchblox.com/security/data/cve/CVE-2023-35340.md) | High | Windows CNG Key Isolation Service | 7.8 | 0.0027 | | | [CVE-2023-35329](https://patchblox.com/security/data/cve/CVE-2023-35329.md) | Routine | Windows Authentication Methods | 6.5 | 0.0182 | | | [CVE-2023-32034](https://patchblox.com/security/data/cve/CVE-2023-32034.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-32035](https://patchblox.com/security/data/cve/CVE-2023-32035.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-33166](https://patchblox.com/security/data/cve/CVE-2023-33166.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-33167](https://patchblox.com/security/data/cve/CVE-2023-33167.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-33168](https://patchblox.com/security/data/cve/CVE-2023-33168.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-33169](https://patchblox.com/security/data/cve/CVE-2023-33169.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-33172](https://patchblox.com/security/data/cve/CVE-2023-33172.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-33173](https://patchblox.com/security/data/cve/CVE-2023-33173.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-33164](https://patchblox.com/security/data/cve/CVE-2023-33164.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-35314](https://patchblox.com/security/data/cve/CVE-2023-35314.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-35318](https://patchblox.com/security/data/cve/CVE-2023-35318.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-35319](https://patchblox.com/security/data/cve/CVE-2023-35319.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0163 | | | [CVE-2023-35321](https://patchblox.com/security/data/cve/CVE-2023-35321.md) | Routine | Windows Deployment Services | 6.5 | 0.0156 | | | [CVE-2023-35296](https://patchblox.com/security/data/cve/CVE-2023-35296.md) | Routine | Microsoft Printer Drivers | 6.5 | 0.0153 | | | [CVE-2023-35316](https://patchblox.com/security/data/cve/CVE-2023-35316.md) | Routine | Windows Remote Procedure Call | 6.5 | 0.0140 | | | [CVE-2023-32042](https://patchblox.com/security/data/cve/CVE-2023-32042.md) | Routine | Windows OLE | 6.5 | 0.0134 | | | [CVE-2023-35308](https://patchblox.com/security/data/cve/CVE-2023-35308.md) | Routine | Windows MSHTML Platform | 6.5 | 0.0111 | | | [CVE-2023-32033](https://patchblox.com/security/data/cve/CVE-2023-32033.md) | Routine | Windows Cluster Server | 6.6 | 0.0094 | | | [CVE-2023-35336](https://patchblox.com/security/data/cve/CVE-2023-35336.md) | Routine | Windows MSHTML Platform | 6.5 | 0.0092 | | | [CVE-2023-35331](https://patchblox.com/security/data/cve/CVE-2023-35331.md) | Routine | Windows Local Security Authority (LSA) | 6.5 | 0.0072 | | | [CVE-2023-35344](https://patchblox.com/security/data/cve/CVE-2023-35344.md) | Routine | Role: DNS Server | 6.6 | 0.0070 | | | [CVE-2023-35345](https://patchblox.com/security/data/cve/CVE-2023-35345.md) | Routine | Role: DNS Server | 6.6 | 0.0070 | | | [CVE-2023-35346](https://patchblox.com/security/data/cve/CVE-2023-35346.md) | Routine | Role: DNS Server | 6.6 | 0.0070 | | | [CVE-2023-35351](https://patchblox.com/security/data/cve/CVE-2023-35351.md) | Routine | Windows Active Directory Certificate Services | 6.6 | 0.0070 | | | [CVE-2023-33174](https://patchblox.com/security/data/cve/CVE-2023-33174.md) | Routine | Windows Cryptographic Services | 5.5 | 0.0068 | | | [CVE-2023-35310](https://patchblox.com/security/data/cve/CVE-2023-35310.md) | Routine | Role: DNS Server | 6.6 | 0.0066 | | | [CVE-2023-32039](https://patchblox.com/security/data/cve/CVE-2023-32039.md) | Routine | Microsoft Printer Drivers | 5.5 | 0.0052 | | | [CVE-2023-32040](https://patchblox.com/security/data/cve/CVE-2023-32040.md) | Routine | Microsoft Printer Drivers | 5.5 | 0.0052 | | | [CVE-2023-32085](https://patchblox.com/security/data/cve/CVE-2023-32085.md) | Routine | Microsoft Printer Drivers | 5.5 | 0.0052 | | | [CVE-2023-35306](https://patchblox.com/security/data/cve/CVE-2023-35306.md) | Routine | Microsoft Printer Drivers | 5.5 | 0.0052 | | | [CVE-2023-35324](https://patchblox.com/security/data/cve/CVE-2023-35324.md) | Routine | Microsoft Printer Drivers | 5.5 | 0.0052 | | | [CVE-2023-32043](https://patchblox.com/security/data/cve/CVE-2023-32043.md) | Routine | Windows Remote Desktop | 6.8 | 0.0051 | | | [CVE-2023-35341](https://patchblox.com/security/data/cve/CVE-2023-35341.md) | Routine | Windows Media | 6.2 | 0.0050 | | | [CVE-2023-35332](https://patchblox.com/security/data/cve/CVE-2023-35332.md) | Routine | Windows Remote Desktop | 6.8 | 0.0050 | | | [CVE-2023-32055](https://patchblox.com/security/data/cve/CVE-2023-32055.md) | Routine | Windows Active Template Library | 6.7 | 0.0036 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo