# KB5037788: May 2024 cumulative update for Windows 10 1507 KB5037788, released May 14, 2024, fixes 30 CVEs across 2 products. 2 of them are being exploited (CVE-2024-30051); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5037788 - Platform: Microsoft - Released: May 14, 2024 - Priority: Patch now (Closes CVE-2024-30051, exploited (CISA KEV, ransomware)) - CVEs: 30, exploited: 2, on CISA KEV: 2 - Vendor advisory: https://support.microsoft.com/help/5037788 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows 10 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-for-32-bit-systems.md) | | 10240.20651 | | [Windows 10 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-for-x64-based-systems.md) | | 10240.20651 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-30051](https://patchblox.com/security/data/cve/CVE-2024-30051.md) | Patch now | Windows DWM Core Library | 7.8 | 0.0569 | CISA KEV, Ransomware, Disclosed | | [CVE-2024-30040](https://patchblox.com/security/data/cve/CVE-2024-30040.md) | Patch now | Windows MSHTML Platform | 8.8 | 0.0394 | CISA KEV | | [CVE-2024-30050](https://patchblox.com/security/data/cve/CVE-2024-30050.md) | Urgent | Windows Mark of the Web (MOTW) | 5.4 | 0.1147 | More likely | | [CVE-2024-30037](https://patchblox.com/security/data/cve/CVE-2024-30037.md) | Urgent | Windows Common Log File System Driver | 5.5 | 0.0528 | More likely | | [CVE-2024-30032](https://patchblox.com/security/data/cve/CVE-2024-30032.md) | Urgent | Windows DWM Core Library | 7.8 | 0.0452 | More likely | | [CVE-2024-30025](https://patchblox.com/security/data/cve/CVE-2024-30025.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0428 | More likely | | [CVE-2024-26211](https://patchblox.com/security/data/cve/CVE-2024-26211.md) | Urgent | Windows Remote Access Connection Manager | 7.8 | 0.0412 | More likely | | [CVE-2024-29996](https://patchblox.com/security/data/cve/CVE-2024-29996.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0335 | More likely | | [CVE-2024-30038](https://patchblox.com/security/data/cve/CVE-2024-30038.md) | Urgent | Windows Win32K - ICOMP | 7.8 | 0.0255 | More likely | | [CVE-2024-30049](https://patchblox.com/security/data/cve/CVE-2024-30049.md) | Urgent | Windows Win32K - ICOMP | 7.8 | 0.0071 | More likely | | [CVE-2024-30017](https://patchblox.com/security/data/cve/CVE-2024-30017.md) | High | Windows Hyper-V | 8.8 | 0.0191 | | | [CVE-2024-30006](https://patchblox.com/security/data/cve/CVE-2024-30006.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0172 | | | [CVE-2024-30009](https://patchblox.com/security/data/cve/CVE-2024-30009.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0172 | | | [CVE-2024-30022](https://patchblox.com/security/data/cve/CVE-2024-30022.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.5 | 0.0154 | | | [CVE-2024-30023](https://patchblox.com/security/data/cve/CVE-2024-30023.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.5 | 0.0154 | | | [CVE-2024-30024](https://patchblox.com/security/data/cve/CVE-2024-30024.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.5 | 0.0154 | | | [CVE-2024-30014](https://patchblox.com/security/data/cve/CVE-2024-30014.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.5 | 0.0149 | | | [CVE-2024-30015](https://patchblox.com/security/data/cve/CVE-2024-30015.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.5 | 0.0149 | | | [CVE-2024-30029](https://patchblox.com/security/data/cve/CVE-2024-30029.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.5 | 0.0149 | | | [CVE-2024-30020](https://patchblox.com/security/data/cve/CVE-2024-30020.md) | High | Windows Cryptographic Services | 8.1 | 0.0130 | | | [CVE-2024-30028](https://patchblox.com/security/data/cve/CVE-2024-30028.md) | High | Windows Win32K - ICOMP | 7.8 | 0.0071 | | | [CVE-2024-30027](https://patchblox.com/security/data/cve/CVE-2024-30027.md) | High | Windows NTFS | 7.8 | 0.0064 | | | [CVE-2024-30031](https://patchblox.com/security/data/cve/CVE-2024-30031.md) | High | Windows CNG Key Isolation Service | 7.8 | 0.0040 | | | [CVE-2024-30008](https://patchblox.com/security/data/cve/CVE-2024-30008.md) | Routine | Windows DWM Core Library | 5.5 | 0.0079 | | | [CVE-2024-30016](https://patchblox.com/security/data/cve/CVE-2024-30016.md) | Routine | Windows Cryptographic Services | 5.5 | 0.0079 | | | [CVE-2024-26207](https://patchblox.com/security/data/cve/CVE-2024-26207.md) | Routine | Windows Remote Access Connection Manager | 5.5 | 0.0076 | | | [CVE-2024-28902](https://patchblox.com/security/data/cve/CVE-2024-28902.md) | Routine | Windows Remote Access Connection Manager | 5.5 | 0.0076 | | | [CVE-2024-30039](https://patchblox.com/security/data/cve/CVE-2024-30039.md) | Routine | Windows Remote Access Connection Manager | 5.5 | 0.0074 | | | [CVE-2024-26217](https://patchblox.com/security/data/cve/CVE-2024-26217.md) | Routine | Windows Remote Access Connection Manager | 5.5 | 0.0069 | | | [CVE-2024-28900](https://patchblox.com/security/data/cve/CVE-2024-28900.md) | Routine | Windows Remote Access Connection Manager | 5.5 | 0.0067 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo