# KB5040427: July 2024 cumulative update for Windows 10 21H2 KB5040427, released July 9, 2024, fixes 76 CVEs across 6 products. 2 of them are being exploited (CVE-2024-38112); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5040427 - Platform: Microsoft - Released: Jul 9, 2024 - Priority: Patch now (Closes CVE-2024-38112, exploited (CISA KEV)) - CVEs: 76, exploited: 2, on CISA KEV: 1 - Vendor advisory: https://support.microsoft.com/help/5040427 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows 10 Version 21H2 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-21h2-for-32-bit-systems.md) | | | | [Windows 10 Version 21H2 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-21h2-for-arm64-based-systems.md) | | | | [Windows 10 Version 21H2 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-21h2-for-x64-based-systems.md) | | | | [Windows 10 Version 22H2 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-22h2-for-32-bit-systems.md) | | | | [Windows 10 Version 22H2 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-22h2-for-arm64-based-systems.md) | | | | [Windows 10 Version 22H2 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-version-22h2-for-x64-based-systems.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2024-38112](https://patchblox.com/security/data/cve/CVE-2024-38112.md) | Patch now | Windows MSHTML Platform | 7.5 | 0.8423 | CISA KEV | | [CVE-2023-24932](https://patchblox.com/security/data/cve/CVE-2023-24932.md) | Patch now | Windows Secure Boot | 6.7 | 0.1182 | Exploited, Disclosed | | [CVE-2024-38060](https://patchblox.com/security/data/cve/CVE-2024-38060.md) | Urgent | Windows Imaging Component | 8.8 | 0.1591 | More likely | | [CVE-2024-38054](https://patchblox.com/security/data/cve/CVE-2024-38054.md) | Urgent | Microsoft Streaming Service | 7.8 | 0.1042 | More likely | | [CVE-2024-38052](https://patchblox.com/security/data/cve/CVE-2024-38052.md) | Urgent | Microsoft Streaming Service | 7.8 | 0.0697 | More likely | | [CVE-2024-38085](https://patchblox.com/security/data/cve/CVE-2024-38085.md) | Urgent | Windows Win32 Kernel Subsystem | 7.8 | 0.0526 | More likely | | [CVE-2024-38059](https://patchblox.com/security/data/cve/CVE-2024-38059.md) | Urgent | Windows Win32K - ICOMP | 7.8 | 0.0374 | More likely | | [CVE-2024-38066](https://patchblox.com/security/data/cve/CVE-2024-38066.md) | Urgent | Windows Win32K - GRFX | 7.8 | 0.0086 | More likely | | [CVE-2024-38079](https://patchblox.com/security/data/cve/CVE-2024-38079.md) | Urgent | Microsoft Graphics Component | 7.8 | 0.0071 | More likely | | [CVE-2024-39684](https://patchblox.com/security/data/cve/CVE-2024-39684.md) | Urgent | Active Directory Rights Management Services | 7.8 | 0.0042 | More likely | | [CVE-2024-30081](https://patchblox.com/security/data/cve/CVE-2024-30081.md) | High | Windows NTLM | 7.1 | 0.2381 | | | [CVE-2024-3596](https://patchblox.com/security/data/cve/CVE-2024-3596.md) | High | NPS RADIUS Server | 9.0 | 0.1486 | | | [CVE-2024-38068](https://patchblox.com/security/data/cve/CVE-2024-38068.md) | High | Windows Online Certificate Status Protocol (OCSP) | 7.5 | 0.0252 | | | [CVE-2024-38064](https://patchblox.com/security/data/cve/CVE-2024-38064.md) | High | Windows TCP/IP | 7.5 | 0.0220 | | | [CVE-2024-38025](https://patchblox.com/security/data/cve/CVE-2024-38025.md) | High | Windows Performance Monitor | 7.2 | 0.0207 | | | [CVE-2024-38028](https://patchblox.com/security/data/cve/CVE-2024-38028.md) | High | Windows Performance Monitor | 7.2 | 0.0207 | | | [CVE-2024-38091](https://patchblox.com/security/data/cve/CVE-2024-38091.md) | High | Microsoft WS-Discovery | 7.5 | 0.0189 | | | [CVE-2024-38104](https://patchblox.com/security/data/cve/CVE-2024-38104.md) | High | Windows Fax and Scan Service | 8.8 | 0.0182 | | | [CVE-2024-38019](https://patchblox.com/security/data/cve/CVE-2024-38019.md) | High | Windows Performance Monitor | 7.2 | 0.0178 | | | [CVE-2024-38062](https://patchblox.com/security/data/cve/CVE-2024-38062.md) | High | Windows Kernel-Mode Drivers | 7.8 | 0.0161 | | | [CVE-2024-30013](https://patchblox.com/security/data/cve/CVE-2024-30013.md) | High | Windows MultiPoint Services | 8.8 | 0.0160 | | | [CVE-2024-38061](https://patchblox.com/security/data/cve/CVE-2024-38061.md) | High | Role: Active Directory Certificate Services; Active Directory Domain Services | 7.5 | 0.0150 | | | [CVE-2024-37969](https://patchblox.com/security/data/cve/CVE-2024-37969.md) | High | Windows Secure Boot | 8.0 | 0.0136 | | | [CVE-2024-37971](https://patchblox.com/security/data/cve/CVE-2024-37971.md) | High | Windows Secure Boot | 8.0 | 0.0136 | | | [CVE-2024-37975](https://patchblox.com/security/data/cve/CVE-2024-37975.md) | High | Windows Secure Boot | 8.0 | 0.0126 | | | [CVE-2024-37987](https://patchblox.com/security/data/cve/CVE-2024-37987.md) | High | Windows Secure Boot | 8.0 | 0.0126 | | | [CVE-2024-38011](https://patchblox.com/security/data/cve/CVE-2024-38011.md) | High | Windows Secure Boot | 8.0 | 0.0126 | | | [CVE-2024-38184](https://patchblox.com/security/data/cve/CVE-2024-38184.md) | High | Windows Kernel-Mode Drivers | 7.8 | 0.0117 | | | [CVE-2024-28899](https://patchblox.com/security/data/cve/CVE-2024-28899.md) | High | Windows Secure Boot | 8.8 | 0.0116 | | | [CVE-2024-38053](https://patchblox.com/security/data/cve/CVE-2024-38053.md) | High | Windows Internet Connection Sharing (ICS) | 8.8 | 0.0115 | | | [CVE-2024-37981](https://patchblox.com/security/data/cve/CVE-2024-37981.md) | High | Windows Secure Boot | 8.0 | 0.0113 | | | [CVE-2024-38051](https://patchblox.com/security/data/cve/CVE-2024-38051.md) | High | Microsoft Graphics Component | 7.8 | 0.0112 | | | [CVE-2024-38185](https://patchblox.com/security/data/cve/CVE-2024-38185.md) | High | Windows Kernel-Mode Drivers | 7.8 | 0.0111 | | | [CVE-2024-38187](https://patchblox.com/security/data/cve/CVE-2024-38187.md) | High | Windows Kernel-Mode Drivers | 7.8 | 0.0111 | | | [CVE-2024-37970](https://patchblox.com/security/data/cve/CVE-2024-37970.md) | High | Windows Secure Boot | 8.0 | 0.0106 | | | [CVE-2024-38033](https://patchblox.com/security/data/cve/CVE-2024-38033.md) | High | Windows PowerShell | 7.3 | 0.0106 | | | [CVE-2024-38032](https://patchblox.com/security/data/cve/CVE-2024-38032.md) | High | XBox Crypto Graphic Services | 7.1 | 0.0100 | | | [CVE-2024-37972](https://patchblox.com/security/data/cve/CVE-2024-37972.md) | High | Windows Secure Boot | 8.0 | 0.0098 | | | [CVE-2024-37974](https://patchblox.com/security/data/cve/CVE-2024-37974.md) | High | Windows Secure Boot | 8.0 | 0.0098 | | | [CVE-2024-37986](https://patchblox.com/security/data/cve/CVE-2024-37986.md) | High | Windows Secure Boot | 8.0 | 0.0098 | | | [CVE-2024-37988](https://patchblox.com/security/data/cve/CVE-2024-37988.md) | High | Windows Secure Boot | 8.0 | 0.0098 | | | [CVE-2024-37989](https://patchblox.com/security/data/cve/CVE-2024-37989.md) | High | Windows Secure Boot | 8.0 | 0.0098 | | | [CVE-2024-38010](https://patchblox.com/security/data/cve/CVE-2024-38010.md) | High | Windows Secure Boot | 8.0 | 0.0098 | | | [CVE-2024-38186](https://patchblox.com/security/data/cve/CVE-2024-38186.md) | High | Windows Kernel-Mode Drivers | 7.8 | 0.0084 | | | [CVE-2024-38034](https://patchblox.com/security/data/cve/CVE-2024-38034.md) | High | Windows Filtering | 7.8 | 0.0076 | | | [CVE-2024-38057](https://patchblox.com/security/data/cve/CVE-2024-38057.md) | High | Microsoft Streaming Service | 7.8 | 0.0076 | | | [CVE-2024-37984](https://patchblox.com/security/data/cve/CVE-2024-37984.md) | High | Windows Secure Boot | 8.4 | 0.0075 | | | [CVE-2024-38050](https://patchblox.com/security/data/cve/CVE-2024-38050.md) | High | Windows Workstation Service | 7.8 | 0.0071 | | | [CVE-2024-38070](https://patchblox.com/security/data/cve/CVE-2024-38070.md) | High | Windows LockDown Policy (WLDP) | 7.8 | 0.0071 | | | [CVE-2024-38043](https://patchblox.com/security/data/cve/CVE-2024-38043.md) | High | Windows PowerShell | 7.8 | 0.0069 | | | [CVE-2024-38047](https://patchblox.com/security/data/cve/CVE-2024-38047.md) | High | Windows PowerShell | 7.8 | 0.0067 | | | [CVE-2024-30079](https://patchblox.com/security/data/cve/CVE-2024-30079.md) | High | Windows Remote Access Connection Manager | 7.8 | 0.0066 | | | [CVE-2024-37973](https://patchblox.com/security/data/cve/CVE-2024-37973.md) | High | Windows Secure Boot | 8.8 | 0.0065 | | | [CVE-2024-38022](https://patchblox.com/security/data/cve/CVE-2024-38022.md) | High | Windows Image Acquisition | 7.0 | 0.0057 | | | [CVE-2024-38191](https://patchblox.com/security/data/cve/CVE-2024-38191.md) | High | Windows Kernel-Mode Drivers | 7.8 | 0.0051 | | | [CVE-2024-38517](https://patchblox.com/security/data/cve/CVE-2024-38517.md) | High | Active Directory Rights Management Services | 7.8 | 0.0038 | | | [CVE-2024-21417](https://patchblox.com/security/data/cve/CVE-2024-21417.md) | High | Windows CoreMessaging | 8.8 | 0.0037 | | | [CVE-2024-38069](https://patchblox.com/security/data/cve/CVE-2024-38069.md) | High | Windows Enroll Engine | 7.0 | 0.0033 | | | [CVE-2024-38030](https://patchblox.com/security/data/cve/CVE-2024-38030.md) | Routine | Windows Themes | 6.5 | 0.5110 | | | [CVE-2024-38041](https://patchblox.com/security/data/cve/CVE-2024-38041.md) | Routine | Windows Kernel | 5.5 | 0.0216 | | | [CVE-2024-38049](https://patchblox.com/security/data/cve/CVE-2024-38049.md) | Routine | Windows Distributed Transaction Coordinator | 6.6 | 0.0155 | | | [CVE-2024-38027](https://patchblox.com/security/data/cve/CVE-2024-38027.md) | Routine | Line Printer Daemon Service (LPD) | 6.5 | 0.0101 | | | [CVE-2024-38048](https://patchblox.com/security/data/cve/CVE-2024-38048.md) | Routine | NDIS | 6.5 | 0.0101 | | | [CVE-2024-26184](https://patchblox.com/security/data/cve/CVE-2024-26184.md) | Routine | Windows Secure Boot | 6.8 | 0.0095 | | | [CVE-2024-38058](https://patchblox.com/security/data/cve/CVE-2024-38058.md) | Routine | Windows BitLocker | 6.8 | 0.0093 | | | [CVE-2024-38017](https://patchblox.com/security/data/cve/CVE-2024-38017.md) | Routine | Windows Message Queuing | 5.5 | 0.0093 | | | [CVE-2024-38065](https://patchblox.com/security/data/cve/CVE-2024-38065.md) | Routine | Windows Secure Boot | 6.8 | 0.0092 | | | [CVE-2024-35270](https://patchblox.com/security/data/cve/CVE-2024-35270.md) | Routine | Windows iSCSI | 5.3 | 0.0086 | | | [CVE-2024-38101](https://patchblox.com/security/data/cve/CVE-2024-38101.md) | Routine | Windows Internet Connection Sharing (ICS) | 6.5 | 0.0085 | | | [CVE-2024-38102](https://patchblox.com/security/data/cve/CVE-2024-38102.md) | Routine | Windows Internet Connection Sharing (ICS) | 6.5 | 0.0085 | | | [CVE-2024-38105](https://patchblox.com/security/data/cve/CVE-2024-38105.md) | Routine | Windows Layer-2 Bridge Network Driver | 6.5 | 0.0085 | | | [CVE-2024-38055](https://patchblox.com/security/data/cve/CVE-2024-38055.md) | Routine | Microsoft Windows Codecs Library | 5.5 | 0.0079 | | | [CVE-2024-38056](https://patchblox.com/security/data/cve/CVE-2024-38056.md) | Routine | Microsoft Windows Codecs Library | 5.5 | 0.0079 | | | [CVE-2024-38161](https://patchblox.com/security/data/cve/CVE-2024-38161.md) | Routine | Windows Mobile Broadband | 6.8 | 0.0077 | | | [CVE-2024-38013](https://patchblox.com/security/data/cve/CVE-2024-38013.md) | Routine | Windows Server Backup | 6.7 | 0.0063 | | | [CVE-2024-30071](https://patchblox.com/security/data/cve/CVE-2024-30071.md) | Routine | Windows Remote Access Connection Manager | 4.7 | 0.0058 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo