# KB5039260: June 2024 security update

KB5039260, released June 11, 2024, fixes 20 CVEs across 2 products. 2 of them are being exploited (CVE-2024-35250); 2 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/microsoft/kb5039260
- Platform: Microsoft
- Released: Jun 11, 2024
- Priority: Patch now (Closes CVE-2024-35250, exploited (CISA KEV))
- CVEs: 20, exploited: 2, on CISA KEV: 2
- Vendor advisory: https://support.microsoft.com/help/5039260

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Windows Server 2012](https://patchblox.com/security/data/product/microsoft/windows-server-2012.md) |  |  |
| [Windows Server 2012 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2012-server-core-installation.md) |  |  |

## CVEs this fix closes

| CVE | Priority | Component | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-35250](https://patchblox.com/security/data/cve/CVE-2024-35250.md) | Patch now | Windows Kernel-Mode Drivers | 7.8 | 0.2522 | CISA KEV |
| [CVE-2024-38213](https://patchblox.com/security/data/cve/CVE-2024-38213.md) | Patch now | Windows Mark of the Web (MOTW) | 6.5 | 0.1363 | CISA KEV |
| [CVE-2024-30080](https://patchblox.com/security/data/cve/CVE-2024-30080.md) | Urgent | Windows Server Service | 9.8 | 0.4287 | More likely |
| [CVE-2024-30087](https://patchblox.com/security/data/cve/CVE-2024-30087.md) | Urgent | Windows Win32K - GRFX | 7.8 | 0.0951 | More likely |
| [CVE-2024-30084](https://patchblox.com/security/data/cve/CVE-2024-30084.md) | Urgent | Windows Kernel-Mode Drivers | 7.0 | 0.0591 | More likely |
| [CVE-2024-30091](https://patchblox.com/security/data/cve/CVE-2024-30091.md) | Urgent | Windows Win32K - GRFX | 7.8 | 0.0426 | More likely |
| [CVE-2024-30082](https://patchblox.com/security/data/cve/CVE-2024-30082.md) | Urgent | Windows Win32K - GRFX | 7.8 | 0.0127 | More likely |
| [CVE-2024-30086](https://patchblox.com/security/data/cve/CVE-2024-30086.md) | Urgent | Windows Win32 Kernel Subsystem | 7.8 | 0.0112 | More likely |
| [CVE-2023-50868](https://patchblox.com/security/data/cve/CVE-2023-50868.md) | High | Microsoft Windows | 7.5 | 0.7430 | Disclosed |
| [CVE-2024-30078](https://patchblox.com/security/data/cve/CVE-2024-30078.md) | High | Windows Wi-Fi Driver | 8.8 | 0.0520 |  |
| [CVE-2024-30070](https://patchblox.com/security/data/cve/CVE-2024-30070.md) | High | Windows DHCP Server | 7.5 | 0.0231 |  |
| [CVE-2024-30090](https://patchblox.com/security/data/cve/CVE-2024-30090.md) | High | Microsoft Streaming Service | 7.0 | 0.0198 |  |
| [CVE-2024-30077](https://patchblox.com/security/data/cve/CVE-2024-30077.md) | High | Microsoft WDAC OLE DB provider for SQL | 8.0 | 0.0180 |  |
| [CVE-2024-30093](https://patchblox.com/security/data/cve/CVE-2024-30093.md) | High | Windows Storage | 7.3 | 0.0115 |  |
| [CVE-2024-30095](https://patchblox.com/security/data/cve/CVE-2024-30095.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.8 | 0.0101 |  |
| [CVE-2024-30094](https://patchblox.com/security/data/cve/CVE-2024-30094.md) | High | Windows Routing and Remote Access Service (RRAS) | 7.8 | 0.0091 |  |
| [CVE-2024-30063](https://patchblox.com/security/data/cve/CVE-2024-30063.md) | Routine | Windows Distributed File System (DFS) | 6.7 | 0.0102 |  |
| [CVE-2024-30065](https://patchblox.com/security/data/cve/CVE-2024-30065.md) | Routine | Windows Themes | 5.5 | 0.0084 |  |
| [CVE-2024-30066](https://patchblox.com/security/data/cve/CVE-2024-30066.md) | Routine | Winlogon | 5.5 | 0.0063 |  |
| [CVE-2024-30067](https://patchblox.com/security/data/cve/CVE-2024-30067.md) | Routine | Winlogon | 5.5 | 0.0063 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo