Microsoft · Security update · May 11, 2021
KB5003228: May 2021 security update
KB5003228, released May 11, 2021, fixes 11 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
UrgentUnsupported product
CVEs closed
11
2 rated Critical
Exploited
0
None reported
Exploitation more likely
1
Vendor assessment
Highest EPSS
0.3923
98th percentile
Priority of the 11 CVEs
Patch now 0
Urgent 3
High 4
Routine 4
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2021-28476 | Role: Windows Hyper-V | Remote Code Execution | 9.9 | 0.3923 | Exploitation Less Likely |
| Urgent | CVE-2021-31194 | Windows OLE | Remote Code Execution | 8.8 | 0.0235 | Exploitation Less Likely |
| Urgent | CVE-2021-31188 | Microsoft Graphics Component | Elevation of Privilege | 7.8 | 0.0137 | More likely |
| High | CVE-2021-31186 | Windows RDP Client | Information Disclosure | 7.4 | 0.0297 | Exploitation Less Likely |
| High | CVE-2021-28455 | Jet Red and Access Connectivity | Remote Code Execution | 8.8 | 0.0212 | Exploitation Less Likely |
| High | CVE-2021-31182 | Microsoft Bluetooth Driver | Spoofing | 7.1 | 0.0084 | Exploitation Less Likely |
| High | CVE-2021-31193 | Windows SSDP Service | Elevation of Privilege | 7.8 | 0.0052 | Exploitation Less Likely |
| Routine | CVE-2020-26144 | Windows Wireless Networking | Spoofing | 6.5 | 0.0491 | Exploitation Less Likely |
| Routine | CVE-2020-24588 | Windows Wireless Networking | Spoofing | 6.5 | 0.0361 | Exploitation Less Likely |
| Routine | CVE-2020-24587 | Windows Wireless Networking | Information Disclosure | 6.5 | 0.0259 | Exploitation Less Likely |
| Routine | CVE-2021-31184 | Microsoft Windows IrDA | Information Disclosure | 5.5 | 0.0156 | Exploitation Less Likely |
Showing 1 to 11 of 11
1