Microsoft · Security update · May 11, 2021

KB5003171: May 2021 cumulative update for Windows 10 1809

KB5003171, released May 11, 2021, fixes 18 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
18
3 rated Critical
Exploited
0
None reported
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.3923
98th percentile

Priority of the 18 CVEs

Patch now 0 Urgent 5 High 7 Routine 6

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2021-28476 Role: Windows Hyper-V Remote Code Execution 9.9 0.3923 Exploitation Less Likely
Urgent CVE-2021-26419 Internet Explorer Remote Code Execution 6.4 0.2277 More likely
Urgent CVE-2021-31194 Windows OLE Remote Code Execution 8.8 0.0235 Exploitation Less Likely
Urgent CVE-2021-31188 Microsoft Graphics Component Elevation of Privilege 7.8 0.0137 More likely
Urgent CVE-2021-31170 Microsoft Graphics Component Elevation of Privilege 7.8 0.0101 More likely
High CVE-2021-31186 Windows RDP Client Information Disclosure 7.4 0.0297 Exploitation Less Likely
High CVE-2021-28455 Jet Red and Access Connectivity Remote Code Execution 8.8 0.0212 Exploitation Less Likely
High CVE-2021-31187 Windows WalletService Elevation of Privilege 7.8 0.0114 Exploitation Less Likely
High CVE-2021-31167 Windows Container Manager Service Elevation of Privilege 7.8 0.0101 Exploitation Less Likely
High CVE-2021-31182 Microsoft Bluetooth Driver Spoofing 7.1 0.0084 Exploitation Less Likely
High CVE-2021-31190 Windows Container Isolation FS Filter Driver Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
High CVE-2021-31193 Windows SSDP Service Elevation of Privilege 7.8 0.0052 Exploitation Less Likely
Routine CVE-2020-26144 Windows Wireless Networking Spoofing 6.5 0.0491 Exploitation Less Likely
Routine CVE-2020-24588 Windows Wireless Networking Spoofing 6.5 0.0361 Exploitation Less Likely
Routine CVE-2020-24587 Windows Wireless Networking Information Disclosure 6.5 0.0259 Exploitation Less Likely
Routine CVE-2021-31184 Microsoft Windows IrDA Information Disclosure 5.5 0.0156 Exploitation Less Likely
Routine CVE-2021-28479 Windows CSC Service Information Disclosure 5.5 0.0076 Exploitation Less Likely
Routine CVE-2021-31191 Windows Projected File System FS Filter Information Disclosure 5.5 0.0076 Exploitation Less Likely
Showing 1 to 18 of 18 1