Microsoft · Security update · May 11, 2021
KB5003173: May 2021 cumulative update for Windows 10 2004
KB5003173, released May 11, 2021, fixes 25 CVEs across 12 products. One of them is being exploited (CVE-2021-31166); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVUnsupported product
CVEs closed
25
4 rated Critical
Exploited
1
CVE-2021-31166
Exploitation more likely
3
Microsoft's assessment
Highest EPSS
0.9987
99th percentile
Priority of the 25 CVEs
Patch now 1
Urgent 5
High 11
Routine 8
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2021-31166 | Windows HTTP.sys | Remote Code Execution | 9.8 | 0.9987 | KEVExploited |
| Urgent | CVE-2021-28476 | Role: Windows Hyper-V | Remote Code Execution | 9.9 | 0.3923 | Exploitation Less Likely |
| Urgent | CVE-2021-26419 | Internet Explorer | Remote Code Execution | 6.4 | 0.2277 | More likely |
| Urgent | CVE-2021-31194 | Windows OLE | Remote Code Execution | 8.8 | 0.0235 | Exploitation Less Likely |
| Urgent | CVE-2021-31188 | Microsoft Graphics Component | Elevation of Privilege | 7.8 | 0.0137 | More likely |
| Urgent | CVE-2021-31170 | Microsoft Graphics Component | Elevation of Privilege | 7.8 | 0.0101 | More likely |
| High | CVE-2021-31186 | Windows RDP Client | Information Disclosure | 7.4 | 0.0297 | Exploitation Less Likely |
| High | CVE-2021-31192 | Microsoft Windows Codecs Library | Remote Code Execution | 7.8 | 0.0225 | Exploitation Less Likely |
| High | CVE-2021-28455 | Jet Red and Access Connectivity | Remote Code Execution | 8.8 | 0.0212 | Exploitation Less Likely |
| High | CVE-2021-31187 | Windows WalletService | Elevation of Privilege | 7.8 | 0.0114 | Exploitation Less Likely |
| High | CVE-2021-31167 | Windows Container Manager Service | Elevation of Privilege | 7.8 | 0.0101 | Exploitation Less Likely |
| High | CVE-2021-31165 | Windows Container Manager Service | Elevation of Privilege | 7.8 | 0.0098 | Exploitation Less Likely |
| High | CVE-2021-31168 | Windows Container Manager Service | Elevation of Privilege | 7.8 | 0.0098 | Exploitation Less Likely |
| High | CVE-2021-31169 | Windows Container Manager Service | Elevation of Privilege | 7.8 | 0.0098 | Exploitation Less Likely |
| High | CVE-2021-31182 | Microsoft Bluetooth Driver | Spoofing | 7.1 | 0.0084 | Exploitation Less Likely |
| High | CVE-2021-31208 | Windows Container Manager Service | Elevation of Privilege | 7.8 | 0.0058 | Exploitation Less Likely |
| High | CVE-2021-31193 | Windows SSDP Service | Elevation of Privilege | 7.8 | 0.0052 | Exploitation Less Likely |
| Routine | CVE-2020-26144 | Windows Wireless Networking | Spoofing | 6.5 | 0.0491 | Exploitation Less Likely |
| Routine | CVE-2020-24588 | Windows Wireless Networking | Spoofing | 6.5 | 0.0361 | Exploitation Less Likely |
| Routine | CVE-2021-31205 | Windows SMB | Security Feature Bypass | 6.5 | 0.0291 | Exploitation Less Likely |
| Routine | CVE-2020-24587 | Windows Wireless Networking | Information Disclosure | 6.5 | 0.0259 | Exploitation Less Likely |
| Routine | CVE-2021-31184 | Microsoft Windows IrDA | Information Disclosure | 5.5 | 0.0156 | Exploitation Less Likely |
| Routine | CVE-2021-28479 | Windows CSC Service | Information Disclosure | 5.5 | 0.0076 | Exploitation Less Likely |
| Routine | CVE-2021-31191 | Windows Projected File System FS Filter | Information Disclosure | 5.5 | 0.0076 | Exploitation Less Likely |
| Routine | CVE-2021-31185 | Windows Desktop Bridge | Denial of Service | 5.5 | 0.0065 | Exploitation Less Likely |
Showing 1 to 25 of 25
1
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.