# KB5039236: June 2024 cumulative update for Windows Server 23H2 KB5039236, released June 11, 2024, fixes 30 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.950). 3 of them are being exploited (CVE-2024-30088); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5039236 - Platform: Microsoft - Released: Jun 11, 2024 - Priority: Patch now (Closes CVE-2024-30088, exploited (CISA KEV, ransomware)) - CVEs: 30, exploited: 3, on CISA KEV: 3 - Vendor advisory: https://support.microsoft.com/help/5039236 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2022, 23H2 Edition (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2022-23h2-edition-server-core-installation.md) | | 25398.950 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-30088](https://patchblox.com/security/data/cve/CVE-2024-30088.md) | Patch now | Windows NT OS Kernel | 7.0 | 0.6820 | CISA KEV, Ransomware | | [CVE-2024-35250](https://patchblox.com/security/data/cve/CVE-2024-35250.md) | Patch now | Windows Kernel-Mode Drivers | 7.8 | 0.2522 | CISA KEV | | [CVE-2024-38213](https://patchblox.com/security/data/cve/CVE-2024-38213.md) | Patch now | Windows Mark of the Web (MOTW) | 6.5 | 0.1363 | CISA KEV | | [CVE-2024-30080](https://patchblox.com/security/data/cve/CVE-2024-30080.md) | Urgent | Windows Server Service | 9.8 | 0.4287 | More likely | | [CVE-2024-30085](https://patchblox.com/security/data/cve/CVE-2024-30085.md) | Urgent | Windows Cloud Files Mini Filter Driver | 7.8 | 0.1432 | More likely | | [CVE-2024-30087](https://patchblox.com/security/data/cve/CVE-2024-30087.md) | Urgent | Windows Win32K - GRFX | 7.8 | 0.0951 | More likely | | [CVE-2024-30089](https://patchblox.com/security/data/cve/CVE-2024-30089.md) | Urgent | Microsoft Streaming Service | 7.8 | 0.0810 | More likely | | [CVE-2024-30084](https://patchblox.com/security/data/cve/CVE-2024-30084.md) | Urgent | Windows Kernel-Mode Drivers | 7.0 | 0.0591 | More likely | | [CVE-2024-30091](https://patchblox.com/security/data/cve/CVE-2024-30091.md) | Urgent | Windows Win32K - GRFX | 7.8 | 0.0426 | More likely | | [CVE-2024-30082](https://patchblox.com/security/data/cve/CVE-2024-30082.md) | Urgent | Windows Win32K - GRFX | 7.8 | 0.0127 | More likely | | [CVE-2024-30086](https://patchblox.com/security/data/cve/CVE-2024-30086.md) | Urgent | Windows Win32 Kernel Subsystem | 7.8 | 0.0112 | More likely | | [CVE-2024-30099](https://patchblox.com/security/data/cve/CVE-2024-30099.md) | Urgent | Windows NT OS Kernel | 7.0 | 0.0054 | More likely | | [CVE-2023-50868](https://patchblox.com/security/data/cve/CVE-2023-50868.md) | High | Microsoft Windows | 7.5 | 0.7430 | Disclosed | | [CVE-2024-30078](https://patchblox.com/security/data/cve/CVE-2024-30078.md) | High | Windows Wi-Fi Driver | 8.8 | 0.0520 | | | [CVE-2024-30090](https://patchblox.com/security/data/cve/CVE-2024-30090.md) | High | Microsoft Streaming Service | 7.0 | 0.0198 | | | [CVE-2024-30077](https://patchblox.com/security/data/cve/CVE-2024-30077.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.0 | 0.0180 | | | [CVE-2024-30097](https://patchblox.com/security/data/cve/CVE-2024-30097.md) | High | Microsoft Windows Speech | 8.8 | 0.0173 | | | [CVE-2024-30093](https://patchblox.com/security/data/cve/CVE-2024-30093.md) | High | Windows Storage | 7.3 | 0.0115 | | | [CVE-2024-30095](https://patchblox.com/security/data/cve/CVE-2024-30095.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.8 | 0.0101 | | | [CVE-2024-30094](https://patchblox.com/security/data/cve/CVE-2024-30094.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.8 | 0.0091 | | | [CVE-2024-30072](https://patchblox.com/security/data/cve/CVE-2024-30072.md) | High | Windows Event Logging Service | 7.8 | 0.0086 | | | [CVE-2024-30064](https://patchblox.com/security/data/cve/CVE-2024-30064.md) | High | Windows Kernel | 8.8 | 0.0079 | | | [CVE-2024-30068](https://patchblox.com/security/data/cve/CVE-2024-30068.md) | High | Windows Kernel | 8.8 | 0.0078 | | | [CVE-2024-30076](https://patchblox.com/security/data/cve/CVE-2024-30076.md) | Routine | Windows Container Manager Service | 6.8 | 0.0171 | | | [CVE-2024-30063](https://patchblox.com/security/data/cve/CVE-2024-30063.md) | Routine | Windows Distributed File System (DFS) | 6.7 | 0.0102 | | | [CVE-2024-30096](https://patchblox.com/security/data/cve/CVE-2024-30096.md) | Routine | Windows Cryptographic Services | 5.5 | 0.0096 | | | [CVE-2024-30065](https://patchblox.com/security/data/cve/CVE-2024-30065.md) | Routine | Windows Themes | 5.5 | 0.0084 | | | [CVE-2024-30066](https://patchblox.com/security/data/cve/CVE-2024-30066.md) | Routine | Winlogon | 5.5 | 0.0063 | | | [CVE-2024-30067](https://patchblox.com/security/data/cve/CVE-2024-30067.md) | Routine | Winlogon | 5.5 | 0.0063 | | | [CVE-2024-30069](https://patchblox.com/security/data/cve/CVE-2024-30069.md) | Routine | Windows Remote Access Connection Manager | 4.7 | 0.0057 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo