# KB5034121: January 2024 cumulative update for Windows 11 21H2 KB5034121, released January 9, 2024, fixes 34 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5034121 - Platform: Microsoft - Released: Jan 9, 2024 - Priority: Urgent (Closes CVE-2024-20674, exploitation more likely) - CVEs: 34, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://support.microsoft.com/help/5034121 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows 11 version 21H2 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-21h2-for-arm64-based-systems.md) | | 22000.2713 | | [Windows 11 version 21H2 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-21h2-for-x64-based-systems.md) | | 22000.2713 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-20674](https://patchblox.com/security/data/cve/CVE-2024-20674.md) | Urgent | Windows Authentication Methods | 8.8 | 0.1717 | More likely | | [CVE-2024-21310](https://patchblox.com/security/data/cve/CVE-2024-21310.md) | Urgent | Windows Cloud Files Mini Filter Driver | 7.8 | 0.1160 | More likely | | [CVE-2024-20698](https://patchblox.com/security/data/cve/CVE-2024-20698.md) | Urgent | Windows Kernel | 7.8 | 0.0865 | More likely | | [CVE-2024-20653](https://patchblox.com/security/data/cve/CVE-2024-20653.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0449 | More likely | | [CVE-2024-20683](https://patchblox.com/security/data/cve/CVE-2024-20683.md) | Urgent | Windows Win32K | 7.8 | 0.0421 | More likely | | [CVE-2024-20700](https://patchblox.com/security/data/cve/CVE-2024-20700.md) | Urgent | Windows Hyper-V | 7.5 | 0.0395 | | | [CVE-2024-20652](https://patchblox.com/security/data/cve/CVE-2024-20652.md) | Urgent | Windows Scripting | 8.1 | 0.0208 | More likely | | [CVE-2024-21307](https://patchblox.com/security/data/cve/CVE-2024-21307.md) | Urgent | Remote Desktop Client | 7.5 | 0.0196 | More likely | | [CVE-2024-20696](https://patchblox.com/security/data/cve/CVE-2024-20696.md) | High | Windows Libarchive | 7.3 | 0.0315 | | | [CVE-2024-20661](https://patchblox.com/security/data/cve/CVE-2024-20661.md) | High | Windows Message Queuing | 7.5 | 0.0276 | | | [CVE-2024-20687](https://patchblox.com/security/data/cve/CVE-2024-20687.md) | High | Windows AllJoyn API | 7.5 | 0.0250 | | | [CVE-2024-20654](https://patchblox.com/security/data/cve/CVE-2024-20654.md) | High | Windows ODBC Driver | 8.0 | 0.0199 | | | [CVE-2024-20682](https://patchblox.com/security/data/cve/CVE-2024-20682.md) | High | Windows Cryptographic Services | 7.8 | 0.0076 | | | [CVE-2024-21309](https://patchblox.com/security/data/cve/CVE-2024-21309.md) | High | Windows Kernel-Mode Drivers | 7.8 | 0.0076 | | | [CVE-2024-20658](https://patchblox.com/security/data/cve/CVE-2024-20658.md) | High | Microsoft Virtual Hard Drive | 7.8 | 0.0071 | | | [CVE-2024-20681](https://patchblox.com/security/data/cve/CVE-2024-20681.md) | High | Windows Subsystem for Linux | 7.8 | 0.0070 | | | [CVE-2024-20657](https://patchblox.com/security/data/cve/CVE-2024-20657.md) | High | Windows Group Policy | 7.0 | 0.0057 | | | [CVE-2024-21320](https://patchblox.com/security/data/cve/CVE-2024-21320.md) | Routine | Windows Themes | 6.5 | 0.2260 | | | [CVE-2024-21306](https://patchblox.com/security/data/cve/CVE-2024-21306.md) | Routine | Microsoft Bluetooth Driver | 5.7 | 0.0583 | | | [CVE-2024-20666](https://patchblox.com/security/data/cve/CVE-2024-20666.md) | Routine | Windows BitLocker | 6.6 | 0.0310 | | | [CVE-2024-21314](https://patchblox.com/security/data/cve/CVE-2024-21314.md) | Routine | Windows Message Queuing | 6.5 | 0.0208 | | | [CVE-2024-20660](https://patchblox.com/security/data/cve/CVE-2024-20660.md) | Routine | Windows Message Queuing | 6.5 | 0.0204 | | | [CVE-2024-20680](https://patchblox.com/security/data/cve/CVE-2024-20680.md) | Routine | Windows Message Queuing | 6.5 | 0.0204 | | | [CVE-2024-20664](https://patchblox.com/security/data/cve/CVE-2024-20664.md) | Routine | Windows Message Queuing | 6.5 | 0.0200 | | | [CVE-2024-20663](https://patchblox.com/security/data/cve/CVE-2024-20663.md) | Routine | Windows Message Queuing | 6.5 | 0.0193 | | | [CVE-2024-21313](https://patchblox.com/security/data/cve/CVE-2024-21313.md) | Routine | Windows TCP/IP | 5.3 | 0.0150 | | | [CVE-2024-21305](https://patchblox.com/security/data/cve/CVE-2024-21305.md) | Routine | Unified Extensible Firmware Interface | 4.4 | 0.0149 | | | [CVE-2024-21316](https://patchblox.com/security/data/cve/CVE-2024-21316.md) | Routine | Windows Server Key Distribution Service | 6.1 | 0.0148 | | | [CVE-2024-20690](https://patchblox.com/security/data/cve/CVE-2024-20690.md) | Routine | Windows Nearby Sharing | 6.5 | 0.0133 | | | [CVE-2024-20692](https://patchblox.com/security/data/cve/CVE-2024-20692.md) | Routine | Windows Local Security Authority Subsystem Service (LSASS) | 5.7 | 0.0118 | | | [CVE-2024-20694](https://patchblox.com/security/data/cve/CVE-2024-20694.md) | Routine | Windows Collaborative Translation Framework | 5.5 | 0.0089 | | | [CVE-2024-21311](https://patchblox.com/security/data/cve/CVE-2024-21311.md) | Routine | Windows Cryptographic Services | 5.5 | 0.0078 | | | [CVE-2024-20699](https://patchblox.com/security/data/cve/CVE-2024-20699.md) | Routine | Windows Hyper-V | 5.5 | 0.0074 | | | [CVE-2024-20691](https://patchblox.com/security/data/cve/CVE-2024-20691.md) | Routine | Windows Themes | 4.7 | 0.0059 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo