# KB5029250: August 2023 cumulative update for Windows Server 2022 KB5029250, released August 8, 2023, fixes 31 CVEs across 2 products. One of them is being exploited (CVE-2023-36884); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5029250 - Platform: Microsoft - Released: Aug 8, 2023 - Priority: Patch now (Closes CVE-2023-36884, exploited (CISA KEV, ransomware)) - CVEs: 31, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://support.microsoft.com/help/5029250 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2022](https://patchblox.com/security/data/product/microsoft/windows-server-2022.md) | | 20348.1906 | | [Windows Server 2022 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2022-server-core-installation.md) | | 20348.1906 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2023-36884](https://patchblox.com/security/data/cve/CVE-2023-36884.md) | Patch now | Microsoft Windows Search Component | 7.5 | 0.9944 | CISA KEV, Ransomware, Disclosed | | [CVE-2023-36900](https://patchblox.com/security/data/cve/CVE-2023-36900.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.1017 | More likely | | [CVE-2023-35359](https://patchblox.com/security/data/cve/CVE-2023-35359.md) | Urgent | Windows Kernel | 7.8 | 0.0989 | More likely | | [CVE-2023-35382](https://patchblox.com/security/data/cve/CVE-2023-35382.md) | Urgent | Windows Kernel | 7.8 | 0.0558 | More likely | | [CVE-2023-35386](https://patchblox.com/security/data/cve/CVE-2023-35386.md) | Urgent | Windows Kernel | 7.8 | 0.0555 | More likely | | [CVE-2023-35380](https://patchblox.com/security/data/cve/CVE-2023-35380.md) | Urgent | Windows Kernel | 7.8 | 0.0358 | More likely | | [CVE-2023-36910](https://patchblox.com/security/data/cve/CVE-2023-36910.md) | Urgent | Windows Message Queuing | 9.8 | 0.0251 | | | [CVE-2023-35385](https://patchblox.com/security/data/cve/CVE-2023-35385.md) | Urgent | Windows Message Queuing | 9.8 | 0.0249 | | | [CVE-2023-36911](https://patchblox.com/security/data/cve/CVE-2023-36911.md) | Urgent | Windows Message Queuing | 9.8 | 0.0171 | | | [CVE-2023-35384](https://patchblox.com/security/data/cve/CVE-2023-35384.md) | Urgent | Windows HTML Platform | 5.4 | 0.0157 | More likely | | [CVE-2023-35383](https://patchblox.com/security/data/cve/CVE-2023-35383.md) | High | Windows Message Queuing | 7.5 | 0.0301 | | | [CVE-2023-36912](https://patchblox.com/security/data/cve/CVE-2023-36912.md) | High | Windows Message Queuing | 7.5 | 0.0207 | | | [CVE-2023-38172](https://patchblox.com/security/data/cve/CVE-2023-38172.md) | High | Windows Message Queuing | 7.5 | 0.0197 | | | [CVE-2023-35381](https://patchblox.com/security/data/cve/CVE-2023-35381.md) | High | Windows Fax and Scan Service | 8.8 | 0.0191 | | | [CVE-2023-36903](https://patchblox.com/security/data/cve/CVE-2023-36903.md) | High | Windows System Assessment Tool | 7.8 | 0.0163 | | | [CVE-2023-38184](https://patchblox.com/security/data/cve/CVE-2023-38184.md) | High | Windows LDAP - Lightweight Directory Access Protocol | 7.5 | 0.0146 | | | [CVE-2023-36882](https://patchblox.com/security/data/cve/CVE-2023-36882.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0141 | | | [CVE-2023-38186](https://patchblox.com/security/data/cve/CVE-2023-38186.md) | High | Windows Mobile Device Management | 8.8 | 0.0130 | | | [CVE-2023-36904](https://patchblox.com/security/data/cve/CVE-2023-36904.md) | High | Windows Cloud Files Mini Filter Driver | 7.8 | 0.0058 | | | [CVE-2023-35378](https://patchblox.com/security/data/cve/CVE-2023-35378.md) | High | Windows Projected File System | 7.0 | 0.0035 | | | [CVE-2023-20569](https://patchblox.com/security/data/cve/CVE-2023-20569.md) | Routine | Microsoft Windows | 5.6 | 0.0730 | | | [CVE-2023-35376](https://patchblox.com/security/data/cve/CVE-2023-35376.md) | Routine | Windows Message Queuing | 6.5 | 0.0221 | | | [CVE-2023-35377](https://patchblox.com/security/data/cve/CVE-2023-35377.md) | Routine | Windows Message Queuing | 6.5 | 0.0221 | | | [CVE-2023-36909](https://patchblox.com/security/data/cve/CVE-2023-36909.md) | Routine | Windows Message Queuing | 6.5 | 0.0206 | | | [CVE-2023-36906](https://patchblox.com/security/data/cve/CVE-2023-36906.md) | Routine | Windows Cryptographic Services | 5.5 | 0.0199 | | | [CVE-2023-36907](https://patchblox.com/security/data/cve/CVE-2023-36907.md) | Routine | Windows Cryptographic Services | 5.5 | 0.0173 | | | [CVE-2023-36913](https://patchblox.com/security/data/cve/CVE-2023-36913.md) | Routine | Windows Message Queuing | 6.5 | 0.0169 | | | [CVE-2023-38254](https://patchblox.com/security/data/cve/CVE-2023-38254.md) | Routine | Windows Message Queuing | 6.5 | 0.0164 | | | [CVE-2023-36908](https://patchblox.com/security/data/cve/CVE-2023-36908.md) | Routine | Role: Windows Hyper-V | 6.5 | 0.0097 | | | [CVE-2023-36889](https://patchblox.com/security/data/cve/CVE-2023-36889.md) | Routine | Windows Group Policy | 5.5 | 0.0063 | | | [CVE-2023-36914](https://patchblox.com/security/data/cve/CVE-2023-36914.md) | Routine | Windows Smart Card | 5.5 | 0.0058 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo