Microsoft · Security update · May 11, 2021

KB5003197: May 2021 cumulative update for Windows 10 1607

KB5003197, released May 11, 2021, fixes 14 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
14
3 rated Critical
Exploited
0
None reported
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.3923
98th percentile

Priority of the 14 CVEs

Patch now 0 Urgent 4 High 5 Routine 5

Applies to

ProductBuild after install
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems14393.4402
Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems14393.4402
Internet Explorer 11 on Windows Server 201614393.4402
Windows 10 Version 1607 for 32-bit Systems14393.4402
Windows 10 Version 1607 for x64-based Systems14393.4402
Windows Server 201614393.4402
Windows Server 2016 (Server Core installation)14393.4402

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2021-28476 Role: Windows Hyper-V Remote Code Execution 9.9 0.3923 Exploitation Less Likely
Urgent CVE-2021-26419 Internet Explorer Remote Code Execution 6.4 0.2277 More likely
Urgent CVE-2021-31194 Windows OLE Remote Code Execution 8.8 0.0235 Exploitation Less Likely
Urgent CVE-2021-31188 Microsoft Graphics Component Elevation of Privilege 7.8 0.0137 More likely
High CVE-2021-31186 Windows RDP Client Information Disclosure 7.4 0.0297 Exploitation Less Likely
High CVE-2021-28455 Jet Red and Access Connectivity Remote Code Execution 8.8 0.0212 Exploitation Less Likely
High CVE-2021-31187 Windows WalletService Elevation of Privilege 7.8 0.0114 Exploitation Less Likely
High CVE-2021-31182 Microsoft Bluetooth Driver Spoofing 7.1 0.0084 Exploitation Less Likely
High CVE-2021-31193 Windows SSDP Service Elevation of Privilege 7.8 0.0052 Exploitation Less Likely
Routine CVE-2020-26144 Windows Wireless Networking Spoofing 6.5 0.0491 Exploitation Less Likely
Routine CVE-2020-24588 Windows Wireless Networking Spoofing 6.5 0.0361 Exploitation Less Likely
Routine CVE-2020-24587 Windows Wireless Networking Information Disclosure 6.5 0.0259 Exploitation Less Likely
Routine CVE-2021-31184 Microsoft Windows IrDA Information Disclosure 5.5 0.0156 Exploitation Less Likely
Routine CVE-2021-28479 Windows CSC Service Information Disclosure 5.5 0.0076 Exploitation Less Likely
Showing 1 to 14 of 14 1