# KB5037848: May 2024 cumulative update for Windows Server 2022 KB5037848, released May 14, 2024, fixes 45 CVEs across 2 products. 2 of them are being exploited (CVE-2024-30051); 2 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5037848 - Platform: Microsoft - Released: May 14, 2024 - Priority: Patch now (Closes CVE-2024-30051, exploited (CISA KEV, ransomware)) - CVEs: 45, exploited: 2, on CISA KEV: 2 - Vendor advisory: https://support.microsoft.com/help/5037848 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2022](https://patchblox.com/security/data/product/microsoft/windows-server-2022.md) | | 20348.2458 | | [Windows Server 2022 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2022-server-core-installation.md) | | 20348.2458 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-30051](https://patchblox.com/security/data/cve/CVE-2024-30051.md) | Patch now | Windows DWM Core Library | 7.8 | 0.0569 | CISA KEV, Ransomware, Disclosed | | [CVE-2024-30040](https://patchblox.com/security/data/cve/CVE-2024-30040.md) | Patch now | Windows MSHTML Platform | 8.8 | 0.0394 | CISA KEV | | [CVE-2024-30050](https://patchblox.com/security/data/cve/CVE-2024-30050.md) | Urgent | Windows Mark of the Web (MOTW) | 5.4 | 0.1147 | More likely | | [CVE-2024-30034](https://patchblox.com/security/data/cve/CVE-2024-30034.md) | Urgent | Windows Cloud Files Mini Filter Driver | 5.5 | 0.0688 | More likely | | [CVE-2024-30037](https://patchblox.com/security/data/cve/CVE-2024-30037.md) | Urgent | Windows Common Log File System Driver | 5.5 | 0.0528 | More likely | | [CVE-2024-30032](https://patchblox.com/security/data/cve/CVE-2024-30032.md) | Urgent | Windows DWM Core Library | 7.8 | 0.0452 | More likely | | [CVE-2024-30025](https://patchblox.com/security/data/cve/CVE-2024-30025.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0428 | More likely | | [CVE-2024-30035](https://patchblox.com/security/data/cve/CVE-2024-30035.md) | Urgent | Windows DWM Core Library | 7.8 | 0.0354 | More likely | | [CVE-2024-29996](https://patchblox.com/security/data/cve/CVE-2024-29996.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.0335 | More likely | | [CVE-2024-30038](https://patchblox.com/security/data/cve/CVE-2024-30038.md) | Urgent | Windows Win32K - ICOMP | 7.8 | 0.0255 | More likely | | [CVE-2024-30049](https://patchblox.com/security/data/cve/CVE-2024-30049.md) | Urgent | Windows Win32K - ICOMP | 7.8 | 0.0071 | More likely | | [CVE-2024-30010](https://patchblox.com/security/data/cve/CVE-2024-30010.md) | High | Windows Hyper-V | 8.8 | 0.0232 | | | [CVE-2024-30017](https://patchblox.com/security/data/cve/CVE-2024-30017.md) | High | Windows Hyper-V | 8.8 | 0.0191 | | | [CVE-2024-30006](https://patchblox.com/security/data/cve/CVE-2024-30006.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.8 | 0.0172 | | | [CVE-2024-30009](https://patchblox.com/security/data/cve/CVE-2024-30009.md) | High | Windows Routing and Remote Access Service (RRAS) | 8.8 | 0.0172 | | | [CVE-2024-30022](https://patchblox.com/security/data/cve/CVE-2024-30022.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.5 | 0.0154 | | | [CVE-2024-30023](https://patchblox.com/security/data/cve/CVE-2024-30023.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.5 | 0.0154 | | | [CVE-2024-30024](https://patchblox.com/security/data/cve/CVE-2024-30024.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.5 | 0.0154 | | | [CVE-2024-30014](https://patchblox.com/security/data/cve/CVE-2024-30014.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.5 | 0.0149 | | | [CVE-2024-30015](https://patchblox.com/security/data/cve/CVE-2024-30015.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.5 | 0.0149 | | | [CVE-2024-30029](https://patchblox.com/security/data/cve/CVE-2024-30029.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.5 | 0.0149 | | | [CVE-2024-30020](https://patchblox.com/security/data/cve/CVE-2024-30020.md) | High | Windows Cryptographic Services | 8.1 | 0.0130 | | | [CVE-2024-30033](https://patchblox.com/security/data/cve/CVE-2024-30033.md) | High | Microsoft Windows Search Component | 7.0 | 0.0096 | | | [CVE-2024-30018](https://patchblox.com/security/data/cve/CVE-2024-30018.md) | High | Windows Kernel | 7.8 | 0.0088 | | | [CVE-2024-30028](https://patchblox.com/security/data/cve/CVE-2024-30028.md) | High | Windows Win32K - ICOMP | 7.8 | 0.0071 | | | [CVE-2024-29994](https://patchblox.com/security/data/cve/CVE-2024-29994.md) | High | Microsoft Windows SCSI Class System File | 7.8 | 0.0067 | | | [CVE-2024-30027](https://patchblox.com/security/data/cve/CVE-2024-30027.md) | High | Windows NTFS | 7.8 | 0.0064 | | | [CVE-2024-30031](https://patchblox.com/security/data/cve/CVE-2024-30031.md) | High | Windows CNG Key Isolation Service | 7.8 | 0.0040 | | | [CVE-2024-30011](https://patchblox.com/security/data/cve/CVE-2024-30011.md) | Routine | Windows Hyper-V | 6.5 | 0.0262 | | | [CVE-2024-30019](https://patchblox.com/security/data/cve/CVE-2024-30019.md) | Routine | Windows DHCP Server | 6.5 | 0.0262 | | | [CVE-2024-30036](https://patchblox.com/security/data/cve/CVE-2024-30036.md) | Routine | Windows Deployment Services | 6.5 | 0.0229 | | | [CVE-2024-29997](https://patchblox.com/security/data/cve/CVE-2024-29997.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0093 | | | [CVE-2024-29998](https://patchblox.com/security/data/cve/CVE-2024-29998.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0093 | | | [CVE-2024-29999](https://patchblox.com/security/data/cve/CVE-2024-29999.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0093 | | | [CVE-2024-30000](https://patchblox.com/security/data/cve/CVE-2024-30000.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0093 | | | [CVE-2024-30001](https://patchblox.com/security/data/cve/CVE-2024-30001.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0093 | | | [CVE-2024-30002](https://patchblox.com/security/data/cve/CVE-2024-30002.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0093 | | | [CVE-2024-30003](https://patchblox.com/security/data/cve/CVE-2024-30003.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0093 | | | [CVE-2024-30005](https://patchblox.com/security/data/cve/CVE-2024-30005.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0093 | | | [CVE-2024-30004](https://patchblox.com/security/data/cve/CVE-2024-30004.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0089 | | | [CVE-2024-30012](https://patchblox.com/security/data/cve/CVE-2024-30012.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0087 | | | [CVE-2024-30021](https://patchblox.com/security/data/cve/CVE-2024-30021.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0083 | | | [CVE-2024-30008](https://patchblox.com/security/data/cve/CVE-2024-30008.md) | Routine | Windows DWM Core Library | 5.5 | 0.0079 | | | [CVE-2024-30016](https://patchblox.com/security/data/cve/CVE-2024-30016.md) | Routine | Windows Cryptographic Services | 5.5 | 0.0079 | | | [CVE-2024-30039](https://patchblox.com/security/data/cve/CVE-2024-30039.md) | Routine | Windows Remote Access Connection Manager | 5.5 | 0.0074 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo