{
  "fix": "KB5039211",
  "url": "https://patchblox.com/security/fix/microsoft/kb5039211",
  "summary": "KB5039211, released June 11, 2024, fixes 28 CVEs across 6 products. 3 of them are being exploited (CVE-2024-30088); 3 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "microsoft",
  "type": "kb",
  "releaseKind": "Security",
  "title": "June 2024 cumulative update for Windows 10 21H2",
  "released": "2024-06-11T00:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2024-30088, exploited (CISA KEV, ransomware)",
  "supported": true,
  "cveCount": 28,
  "exploitedCveCount": 3,
  "kevCveCount": 3,
  "ransomwareCveCount": 1,
  "maxEpss": 0.68202,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://support.microsoft.com/help/5039211",
  "appliesTo": [
    {
      "product": "Windows 10 Version 21H2 for 32-bit Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-10-version-21h2-for-32-bit-systems",
      "fixedVersion": "",
      "supported": true
    },
    {
      "product": "Windows 10 Version 21H2 for ARM64-based Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-10-version-21h2-for-arm64-based-systems",
      "fixedVersion": "",
      "supported": true
    },
    {
      "product": "Windows 10 Version 21H2 for x64-based Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-10-version-21h2-for-x64-based-systems",
      "fixedVersion": "",
      "supported": true
    },
    {
      "product": "Windows 10 Version 22H2 for 32-bit Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-10-version-22h2-for-32-bit-systems",
      "fixedVersion": "",
      "supported": true
    },
    {
      "product": "Windows 10 Version 22H2 for ARM64-based Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-10-version-22h2-for-arm64-based-systems",
      "fixedVersion": "",
      "supported": true
    },
    {
      "product": "Windows 10 Version 22H2 for x64-based Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-10-version-22h2-for-x64-based-systems",
      "fixedVersion": "",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2024-30088",
      "url": "https://patchblox.com/security/cve/CVE-2024-30088",
      "title": "Windows Kernel Elevation of Privilege Vulnerability",
      "component": "Windows NT OS Kernel",
      "impact": "Elevation of Privilege",
      "priority": "Patch now",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.68202,
      "kev": true,
      "ransomware": true,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-35250",
      "url": "https://patchblox.com/security/cve/CVE-2024-35250",
      "title": "Windows Kernel-Mode Driver Elevation of Privilege Vulnerability",
      "component": "Windows Kernel-Mode Drivers",
      "impact": "Elevation of Privilege",
      "priority": "Patch now",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.25222,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-38213",
      "url": "https://patchblox.com/security/cve/CVE-2024-38213",
      "title": "Windows Mark of the Web Security Feature Bypass Vulnerability",
      "component": "Windows Mark of the Web (MOTW)",
      "impact": "Security Feature Bypass",
      "priority": "Patch now",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.13626,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30080",
      "url": "https://patchblox.com/security/cve/CVE-2024-30080",
      "title": "Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability",
      "component": "Windows Server Service",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.42873,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30085",
      "url": "https://patchblox.com/security/cve/CVE-2024-30085",
      "title": "Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability",
      "component": "Windows Cloud Files Mini Filter Driver",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.1432,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30087",
      "url": "https://patchblox.com/security/cve/CVE-2024-30087",
      "title": "Win32k Elevation of Privilege Vulnerability",
      "component": "Windows Win32K - GRFX",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.09505,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30089",
      "url": "https://patchblox.com/security/cve/CVE-2024-30089",
      "title": "Microsoft Streaming Service Elevation of Privilege Vulnerability",
      "component": "Microsoft Streaming Service",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.08104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30084",
      "url": "https://patchblox.com/security/cve/CVE-2024-30084",
      "title": "Windows Kernel-Mode Driver Elevation of Privilege Vulnerability",
      "component": "Windows Kernel-Mode Drivers",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.05907,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30091",
      "url": "https://patchblox.com/security/cve/CVE-2024-30091",
      "title": "Win32k Elevation of Privilege Vulnerability",
      "component": "Windows Win32K - GRFX",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.04259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30082",
      "url": "https://patchblox.com/security/cve/CVE-2024-30082",
      "title": "Win32k Elevation of Privilege Vulnerability",
      "component": "Windows Win32K - GRFX",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.01269,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30086",
      "url": "https://patchblox.com/security/cve/CVE-2024-30086",
      "title": "Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability",
      "component": "Windows Win32 Kernel Subsystem",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.01123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30099",
      "url": "https://patchblox.com/security/cve/CVE-2024-30099",
      "title": "Windows Kernel Elevation of Privilege Vulnerability",
      "component": "Windows NT OS Kernel",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00544,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30078",
      "url": "https://patchblox.com/security/cve/CVE-2024-30078",
      "title": "Windows Wi-Fi Driver Remote Code Execution Vulnerability",
      "component": "Windows Wi-Fi Driver",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.05201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30090",
      "url": "https://patchblox.com/security/cve/CVE-2024-30090",
      "title": "Microsoft Streaming Service Elevation of Privilege Vulnerability",
      "component": "Microsoft Streaming Service",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.01981,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30077",
      "url": "https://patchblox.com/security/cve/CVE-2024-30077",
      "title": "Windows OLE Remote Code Execution Vulnerability",
      "component": "Microsoft WDAC OLE DB provider for SQL",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8,
      "epss": 0.01802,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30097",
      "url": "https://patchblox.com/security/cve/CVE-2024-30097",
      "title": "Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability",
      "component": "Microsoft Windows Speech",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.01729,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30093",
      "url": "https://patchblox.com/security/cve/CVE-2024-30093",
      "title": "Windows Storage Elevation of Privilege Vulnerability",
      "component": "Windows Storage",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.3,
      "epss": 0.01146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30095",
      "url": "https://patchblox.com/security/cve/CVE-2024-30095",
      "title": "Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability",
      "component": "Windows Routing and Remote Access Service (RRAS)",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.01014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30094",
      "url": "https://patchblox.com/security/cve/CVE-2024-30094",
      "title": "Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability",
      "component": "Windows Routing and Remote Access Service (RRAS)",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00913,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30068",
      "url": "https://patchblox.com/security/cve/CVE-2024-30068",
      "title": "Windows Kernel Elevation of Privilege Vulnerability",
      "component": "Windows Kernel",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.0078,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-35265",
      "url": "https://patchblox.com/security/cve/CVE-2024-35265",
      "title": "Windows Perception Service Elevation of Privilege Vulnerability",
      "component": "Windows Perception Service",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30076",
      "url": "https://patchblox.com/security/cve/CVE-2024-30076",
      "title": "Windows Container Manager Service Elevation of Privilege Vulnerability",
      "component": "Windows Container Manager Service",
      "impact": "Elevation of Privilege",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.8,
      "epss": 0.01711,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30063",
      "url": "https://patchblox.com/security/cve/CVE-2024-30063",
      "title": "Windows Distributed File System (DFS) Remote Code Execution Vulnerability",
      "component": "Windows Distributed File System (DFS)",
      "impact": "Remote Code Execution",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.7,
      "epss": 0.01021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30096",
      "url": "https://patchblox.com/security/cve/CVE-2024-30096",
      "title": "Windows Cryptographic Services Information Disclosure Vulnerability",
      "component": "Windows Cryptographic Services",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00955,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30065",
      "url": "https://patchblox.com/security/cve/CVE-2024-30065",
      "title": "Windows Themes Denial of Service Vulnerability",
      "component": "Windows Themes",
      "impact": "Denial of Service",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00841,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30066",
      "url": "https://patchblox.com/security/cve/CVE-2024-30066",
      "title": "Winlogon Elevation of Privilege Vulnerability",
      "component": "Winlogon",
      "impact": "Elevation of Privilege",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00628,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30067",
      "url": "https://patchblox.com/security/cve/CVE-2024-30067",
      "title": "Winlogon Elevation of Privilege Vulnerability",
      "component": "Winlogon",
      "impact": "Elevation of Privilege",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.5,
      "epss": 0.00628,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-30069",
      "url": "https://patchblox.com/security/cve/CVE-2024-30069",
      "title": "Windows Remote Access Connection Manager Information Disclosure Vulnerability",
      "component": "Windows Remote Access Connection Manager",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 4.7,
      "epss": 0.00571,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T00:32:44Z"
}