Microsoft · Security update · June 13, 2023

KB5027215: June 2023 cumulative update for Windows 10 21H2

KB5027215, released June 13, 2023, fixes 29 CVEs across 6 products. One of them is being exploited (CVE-2023-29360); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
29
4 rated Critical
Exploited
1
CVE-2023-29360
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.2162
97th percentile

Priority of the 29 CVEs

Patch now 1 Urgent 8 High 15 Routine 5

Applies to

Product
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2023-29360 Microsoft Streaming Service Elevation of Privilege 8.4 0.2162 KEVExploited
Urgent CVE-2023-29371 Windows Win32K Elevation of Privilege 7.8 0.0539 More likely
Urgent CVE-2023-29358 Windows GDI Elevation of Privilege 7.8 0.0473 More likely
Urgent CVE-2023-29361 Windows Cloud Files Mini Filter Driver Elevation of Privilege 7.0 0.0398 More likely
Urgent CVE-2023-32015 Windows PGM Remote Code Execution 9.8 0.0204 Exploitation Less Likely
Urgent CVE-2023-29363 Windows PGM Remote Code Execution 9.8 0.0194 Exploitation Less Likely
Urgent CVE-2023-32014 Windows PGM Remote Code Execution 9.8 0.0194 Exploitation Less Likely
Urgent CVE-2023-32013 Windows Hyper-V Denial of Service 5.3 0.0164 Exploitation Less Likely
Urgent CVE-2023-29359 Windows Win32K Elevation of Privilege 7.8 0.0055 More likely
High CVE-2023-32011 Windows iSCSI Denial of Service 7.5 0.0194 Exploitation Less Likely
High CVE-2023-29351 Windows Group Policy Elevation of Privilege 8.1 0.0181 Exploitation Less Likely
High CVE-2023-29362 Remote Desktop Client Remote Code Execution 8.8 0.0135 Exploitation Less Likely
High CVE-2023-29372 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0135 Exploitation Less Likely
High CVE-2023-29373 Windows ODBC Driver Remote Code Execution 8.8 0.0135 Exploitation Less Likely
High CVE-2023-29365 Microsoft Windows Codecs Library Remote Code Execution 7.8 0.0072 Exploitation Less Likely
High CVE-2023-29366 Windows Geolocation Service Remote Code Execution 7.8 0.0072 Exploitation Less Likely
High CVE-2023-29370 Microsoft Windows Codecs Library Remote Code Execution 7.8 0.0072 Exploitation Less Likely
High CVE-2023-32008 Windows Resilient File System (ReFS) Remote Code Execution 7.8 0.0072 Exploitation Less Likely
High CVE-2023-32012 Windows Container Manager Service Elevation of Privilege 7.8 0.0051 Exploitation Less Likely
High CVE-2023-32017 Microsoft Printer Drivers Remote Code Execution 7.8 0.0050 Exploitation Less Likely
High CVE-2023-29346 Windows NTFS Elevation of Privilege 7.8 0.0049 Exploitation Less Likely
High CVE-2023-32009 Windows Collaborative Translation Framework Elevation of Privilege 8.8 0.0043 Exploitation Less Likely
High CVE-2023-29364 Windows Authentication Methods Elevation of Privilege 7.0 0.0037 Exploitation Less Likely
High CVE-2023-29368 Windows Filtering Elevation of Privilege 7.0 0.0037 Exploitation Less Likely
Routine CVE-2023-24937 Windows CryptoAPI Denial of Service 6.5 0.0208 Exploitation Less Likely
Showing 1 to 25 of 29 1Next