Microsoft · Security update · September 14, 2021

KB5005575: September 2021 cumulative update for Windows Server 2022

KB5005575, released September 14, 2021, fixes 30 CVEs across 2 products. 3 of them are being exploited (CVE-2021-34527); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEVKnown ransomware use2 publicly disclosed
CVEs closed
30
3 rated Critical
Exploited
3
CVE-2021-34527
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.9979
99th percentile

Priority of the 30 CVEs

Patch now 3 Urgent 7 High 11 Routine 9

Applies to

ProductBuild after install
Windows Server 202220348.230
Windows Server 2022 (Server Core installation)20348.230

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2021-34527 Windows Print Spooler Components Remote Code Execution 8.8 0.9979 KEVRansomwareDisclosedExploited
Patch now CVE-2021-40444 Windows MSHTML Platform Remote Code Execution 8.8 0.9784 KEVRansomwareDisclosedExploited
Patch now CVE-2021-36955 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0407 KEVRansomwareExploited
Urgent CVE-2021-26435 Windows Scripting Remote Code Execution 8.1 0.0538 Exploitation Less Likely
Urgent CVE-2021-36965 Windows WLAN Auto Config Service Remote Code Execution 8.8 0.0468 Exploitation Less Likely
Urgent CVE-2021-38639 Windows Win32K Elevation of Privilege 7.8 0.0136 More likely
Urgent CVE-2021-36975 Windows Win32K Elevation of Privilege 7.8 0.0133 More likely
Urgent CVE-2021-36963 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0122 More likely
Urgent CVE-2021-38633 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0103 More likely
Urgent CVE-2021-38671 Windows Print Spooler Components Elevation of Privilege 7.8 0.0055 More likely
High CVE-2021-36960 Windows SMB Information Disclosure 7.5 0.0329 Exploitation Less Likely
High CVE-2021-38634 Windows Update Elevation of Privilege 7.1 0.0087 Exploitation Less Likely
High CVE-2021-40447 Windows Print Spooler Components Elevation of Privilege 7.8 0.0071 Exploitation Less Likely
High CVE-2021-38667 Windows Print Spooler Components Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
High CVE-2021-36954 Windows Bind Filter Driver Elevation of Privilege 8.8 0.0053 Exploitation Less Likely
High CVE-2021-36964 Windows Event Tracing Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2021-36973 Windows Redirected Drive Buffering Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2021-36974 Windows SMB Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2021-38628 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2021-38630 Windows Event Tracing Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2021-38638 Windows Ancillary Function Driver for WinSock Elevation of Privilege 7.8 0.0052 Exploitation Less Likely
Routine CVE-2021-38629 Windows TDX.sys Information Disclosure 6.5 0.0269 Exploitation Less Likely
Routine CVE-2021-36959 Windows Authenticode Spoofing 5.5 0.0135 Exploitation Less Likely
Routine CVE-2021-36961 Windows Installer Denial of Service 5.5 0.0106 Exploitation Less Likely
Routine CVE-2021-36969 Windows Redirected Drive Buffering Information Disclosure 5.5 0.0088 Exploitation Less Likely
Showing 1 to 25 of 30 1Next