Microsoft · Security update · July 11, 2023

KB5028166: July 2023 cumulative update for Windows 10 21H2

KB5028166, released July 11, 2023, fixes 80 CVEs across 6 products. 3 of them are being exploited (CVE-2023-36874); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEV
CVEs closed
80
6 rated Critical
Exploited
3
CVE-2023-36874
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.4256
98th percentile

Priority of the 80 CVEs

Patch now 3 Urgent 9 High 37 Routine 31

Applies to

Product
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2023-36874 Windows Error Reporting Elevation of Privilege 7.8 0.4256 KEVExploited
Patch now CVE-2023-32046 Windows MSHTML Platform Elevation of Privilege 7.8 0.0997 KEVExploited
Patch now CVE-2023-32049 Windows SmartScreen Security Feature Bypass 8.8 0.0416 KEVExploited
Urgent CVE-2023-32057 Windows Message Queuing Remote Code Execution 9.8 0.0221 Exploitation Less Likely
Urgent CVE-2023-35365 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 9.8 0.0177 Exploitation Less Likely
Urgent CVE-2023-35366 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 9.8 0.0169 Exploitation Less Likely
Urgent CVE-2023-35367 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 9.8 0.0169 Exploitation Less Likely
Urgent CVE-2023-36871 Azure Active Directory Security Feature Bypass 6.5 0.0117 More likely
Urgent CVE-2023-21526 Windows Netlogon Information Disclosure 7.4 0.0113 More likely
Urgent CVE-2023-35297 Windows PGM Remote Code Execution 8.1 0.0112 Exploitation Less Likely
Urgent CVE-2023-35315 Windows Layer-2 Bridge Network Driver Remote Code Execution 8.8 0.0068 Exploitation Less Likely
Urgent CVE-2023-35312 Windows VOLSNAP.SYS Elevation of Privilege 7.8 0.0049 More likely
High CVE-2023-35338 Windows Peer Name Resolution Protocol Denial of Service 7.5 0.0196 Exploitation Less Likely
High CVE-2023-35339 Windows CryptoAPI Denial of Service 7.5 0.0189 Exploitation Less Likely
High CVE-2023-35330 Windows SPNEGO Extended Negotiation Denial of Service 7.5 0.0186 Exploitation Less Likely
High CVE-2023-35325 Windows Print Spooler Components Information Disclosure 7.5 0.0179 Exploitation Less Likely
High CVE-2023-32044 Windows Message Queuing Denial of Service 7.5 0.0152 Exploitation Less Likely
High CVE-2023-32045 Windows Message Queuing Denial of Service 7.5 0.0152 Exploitation Less Likely
High CVE-2023-35303 Microsoft Windows Codecs Library Remote Code Execution 8.8 0.0145 Exploitation Less Likely
High CVE-2023-35302 Microsoft Printer Drivers Remote Code Execution 8.8 0.0144 Exploitation Less Likely
High CVE-2023-35300 Windows Remote Procedure Call Remote Code Execution 8.8 0.0139 Exploitation Less Likely
High CVE-2023-32056 Windows Server Update Service Elevation of Privilege 7.8 0.0124 Exploitation Less Likely
High CVE-2023-32038 Windows ODBC Driver Remote Code Execution 8.8 0.0124 Exploitation Less Likely
High CVE-2023-35356 Windows Kernel Elevation of Privilege 7.8 0.0116 Exploitation Less Likely
High CVE-2023-32054 Windows Volume Shadow Copy Elevation of Privilege 7.3 0.0091 Exploitation Less Likely
Showing 1 to 25 of 80 1Next