Microsoft · Security update · June 13, 2023

KB5027219: June 2023 cumulative update for Windows 10 1607

KB5027219, released June 13, 2023, fixes 34 CVEs across 11 products. One of them is being exploited (CVE-2023-29360); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
34
4 rated Critical
Exploited
1
CVE-2023-29360
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.2162
97th percentile

Priority of the 34 CVEs

Patch now 1 Urgent 7 High 21 Routine 5

Applies to

ProductBuild after install
Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 214393.5989
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems14393.5989
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems14393.5989
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 201614393.5989
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation)14393.5989
Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 202214393.5989
Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 (Server Core installation)14393.5989
Windows 10 Version 1607 for 32-bit Systems14393.5989
Windows 10 Version 1607 for x64-based Systems14393.5989
Windows Server 201614393.5989
Windows Server 2016 (Server Core installation)14393.5989

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2023-29360 Microsoft Streaming Service Elevation of Privilege 8.4 0.2162 KEVExploited
Urgent CVE-2023-29371 Windows Win32K Elevation of Privilege 7.8 0.0539 More likely
Urgent CVE-2023-29358 Windows GDI Elevation of Privilege 7.8 0.0473 More likely
Urgent CVE-2023-32015 Windows PGM Remote Code Execution 9.8 0.0204 Exploitation Less Likely
Urgent CVE-2023-29363 Windows PGM Remote Code Execution 9.8 0.0194 Exploitation Less Likely
Urgent CVE-2023-32014 Windows PGM Remote Code Execution 9.8 0.0194 Exploitation Less Likely
Urgent CVE-2023-24897 .NET and Visual Studio Remote Code Execution 7.8 0.0118 Exploitation Less Likely
Urgent CVE-2023-29359 Windows Win32K Elevation of Privilege 7.8 0.0055 More likely
High CVE-2023-29331 .NET Core Denial of Service 7.5 0.0263 Exploitation Less Likely
High CVE-2023-32030 .NET and Visual Studio Denial of Service 7.5 0.0222 Exploitation Less Likely
High CVE-2023-32011 Windows iSCSI Denial of Service 7.5 0.0194 Exploitation Less Likely
High CVE-2023-29351 Windows Group Policy Elevation of Privilege 8.1 0.0181 Exploitation Less Likely
High CVE-2023-24936 .NET and Visual Studio Elevation of Privilege 7.5 0.0156 Exploitation Less Likely
High CVE-2023-29362 Remote Desktop Client Remote Code Execution 8.8 0.0135 Exploitation Less Likely
High CVE-2023-29372 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0135 Exploitation Less Likely
High CVE-2023-29373 Windows ODBC Driver Remote Code Execution 8.8 0.0135 Exploitation Less Likely
High CVE-2023-32021 Windows SMB Security Feature Bypass 7.1 0.0120 Exploitation Less Likely
High CVE-2023-24895 .NET and Visual Studio Remote Code Execution 7.8 0.0106 Exploitation Less Likely
High CVE-2023-29326 .NET Framework Remote Code Execution 7.8 0.0090 Exploitation Less Likely
High CVE-2023-32022 Windows Server Service Security Feature Bypass 7.6 0.0077 Exploitation Less Likely
High CVE-2023-29365 Microsoft Windows Codecs Library Remote Code Execution 7.8 0.0072 Exploitation Less Likely
High CVE-2023-29367 Windows OLE Remote Code Execution 7.8 0.0072 Exploitation Less Likely
High CVE-2023-29370 Microsoft Windows Codecs Library Remote Code Execution 7.8 0.0072 Exploitation Less Likely
High CVE-2023-32008 Windows Resilient File System (ReFS) Remote Code Execution 7.8 0.0072 Exploitation Less Likely
High CVE-2023-32017 Microsoft Printer Drivers Remote Code Execution 7.8 0.0050 Exploitation Less Likely
Showing 1 to 25 of 34 1Next