Microsoft · Security update · June 8, 2021

KB5003646: June 2021 cumulative update for Windows 10 1809

KB5003646, released June 8, 2021, fixes 23 CVEs across 5 products. 6 of them are being exploited (CVE-2021-1675); 6 on CISA KEV. Patch Radar priority: Patch now.

Patch now6 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
23
3 rated Critical
Exploited
6
CVE-2021-1675
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.8531
99th percentile

Priority of the 23 CVEs

Patch now 6 Urgent 4 High 10 Routine 3

Applies to

ProductBuild after install
Windows 10 Version 1809 for 32-bit Systems17763.1999
Windows 10 Version 1809 for ARM64-based Systems17763.1999
Windows 10 Version 1809 for x64-based Systems17763.1999
Windows Server 201917763.1999
Windows Server 2019 (Server Core installation)17763.1999

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2021-1675 Windows Print Spooler Components Remote Code Execution 7.8 0.8531 KEVRansomwareExploited
Patch now CVE-2021-31955 Windows Kernel Information Disclosure 5.5 0.8111 KEVExploited
Patch now CVE-2021-33742 Windows MSHTML Platform Remote Code Execution 7.5 0.5941 KEVExploited
Patch now CVE-2021-31956 Windows NTFS Elevation of Privilege 7.8 0.2227 KEVExploited
Patch now CVE-2021-31199 Windows Cryptographic Services Elevation of Privilege 5.2 0.0298 KEVExploited
Patch now CVE-2021-31201 Windows Cryptographic Services Elevation of Privilege 5.2 0.0262 KEVExploited
Urgent CVE-2021-31959 Microsoft Scripting Engine Remote Code Execution 6.4 0.0923 More likely
Urgent CVE-2021-31954 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0107 More likely
Urgent CVE-2021-31952 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0081 More likely
Urgent CVE-2021-31951 Windows Kernel Elevation of Privilege 7.8 0.0068 More likely
High CVE-2021-31974 Windows Network File System Denial of Service 7.5 0.0673 Exploitation Less Likely
High CVE-2021-31962 Windows Kerberos Security Feature Bypass 9.4 0.0381 Exploitation Less Likely
High CVE-2021-31975 Windows Network File System Information Disclosure 7.5 0.0366 Exploitation Less Likely
High CVE-2021-31976 Windows Network File System Information Disclosure 7.5 0.0366 Exploitation Less Likely
High CVE-2021-31977 Role: Windows Hyper-V Denial of Service 8.6 0.0318 Exploitation Less Likely
High CVE-2021-31968 Windows Remote Desktop Denial of Service 7.5 0.0318 DisclosedExploitation Less Likely
High CVE-2021-31958 Windows NTLM Elevation of Privilege 7.5 0.0256 Exploitation Less Likely
High CVE-2021-31969 Windows Drivers Elevation of Privilege 7.8 0.0122 Exploitation Less Likely
High CVE-2021-31953 Windows Filter Manager Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
High CVE-2021-31973 Windows Installer Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
Routine CVE-2021-31971 Windows HTML Platform Security Feature Bypass 6.8 0.0209 Exploitation Less Likely
Routine CVE-2021-31970 Windows TCP/IP Security Feature Bypass 5.5 0.0086 Exploitation Less Likely
Routine CVE-2021-31972 Windows Event Logging Service Information Disclosure 5.5 0.0076 Exploitation Less Likely
Showing 1 to 23 of 23 1