Microsoft · Security update · September 14, 2021

KB5005566: September 2021 cumulative update for Windows 10 1909

KB5005566, released September 14, 2021, fixes 34 CVEs across 3 products. 2 of them are being exploited (CVE-2021-40444); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware use2 publicly disclosedUnsupported product
CVEs closed
34
2 rated Critical
Exploited
2
CVE-2021-40444
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.9784
99th percentile

Priority of the 34 CVEs

Patch now 2 Urgent 8 High 14 Routine 10

Applies to

ProductBuild after install
Windows 10 Version 1909 for 32-bit Systems18363.1801
Windows 10 Version 1909 for ARM64-based Systems18363.1801
Windows 10 Version 1909 for x64-based Systems18363.1801

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2021-40444 Windows MSHTML Platform Remote Code Execution 8.8 0.9784 KEVRansomwareDisclosedExploited
Patch now CVE-2021-36955 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0407 KEVRansomwareExploited
Urgent CVE-2021-36958 Windows Print Spooler Components Remote Code Execution 7.8 0.3079 DisclosedMore likely
Urgent CVE-2021-26435 Windows Scripting Remote Code Execution 8.1 0.0538 Exploitation Less Likely
Urgent CVE-2021-36965 Windows WLAN Auto Config Service Remote Code Execution 8.8 0.0468 Exploitation Less Likely
Urgent CVE-2021-38639 Windows Win32K Elevation of Privilege 7.8 0.0136 More likely
Urgent CVE-2021-36975 Windows Win32K Elevation of Privilege 7.8 0.0133 More likely
Urgent CVE-2021-36963 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0122 More likely
Urgent CVE-2021-38633 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0103 More likely
Urgent CVE-2021-38671 Windows Print Spooler Components Elevation of Privilege 7.8 0.0055 More likely
High CVE-2021-1678 Windows NTLM Spoofing 8.8 0.1003 Exploitation Less Likely
High CVE-2021-36960 Windows SMB Information Disclosure 7.5 0.0329 Exploitation Less Likely
High CVE-2021-36967 Windows WLAN Service Elevation of Privilege 8.0 0.0092 Exploitation Less Likely
High CVE-2021-38634 Windows Update Elevation of Privilege 7.1 0.0087 Exploitation Less Likely
High CVE-2021-40447 Windows Print Spooler Components Elevation of Privilege 7.8 0.0071 Exploitation Less Likely
High CVE-2021-38667 Windows Print Spooler Components Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
High CVE-2021-36954 Windows Bind Filter Driver Elevation of Privilege 8.8 0.0053 Exploitation Less Likely
High CVE-2021-36964 Windows Event Tracing Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2021-36966 Windows Subsystem for Linux Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2021-36973 Windows Redirected Drive Buffering Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2021-36974 Windows SMB Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2021-38628 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2021-38630 Windows Event Tracing Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2021-38638 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0052 Exploitation Less Likely
Routine CVE-2021-38629 Windows TDX.sys Information Disclosure 6.5 0.0269 Exploitation Less Likely
Showing 1 to 25 of 34 1Next