Microsoft · Security update · September 12, 2023

KB5030213: September 2023 cumulative update for Windows 10 1607

KB5030213, released September 12, 2023, fixes 21 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
21
3 rated Critical
Exploited
0
None reported
Exploitation more likely
7
Vendor assessment
Highest EPSS
0.2402
97th percentile

Priority of the 21 CVEs

Patch now 0 Urgent 10 High 8 Routine 3

Applies to

ProductBuild after install
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems14393.6252
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems14393.6252
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 201614393.6252
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation)14393.6252
Windows 10 Version 1607 for 32-bit Systems14393.6252
Windows 10 Version 1607 for x64-based Systems14393.6252
Windows Server 201614393.6252
Windows Server 2016 (Server Core installation)14393.6252

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2023-38152 Windows DHCP Server Information Disclosure 5.3 0.2402 More likely
Urgent CVE-2023-38142 Windows Kernel Elevation of Privilege 7.8 0.0555 More likely
Urgent CVE-2023-38144 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0345 More likely
Urgent CVE-2023-38143 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0341 More likely
Urgent CVE-2023-36792 .NET and Visual Studio Remote Code Execution 7.8 0.0123 Exploitation Less Likely
Urgent CVE-2023-36793 .NET and Visual Studio Remote Code Execution 7.8 0.0123 Exploitation Less Likely
Urgent CVE-2023-36796 .NET and Visual Studio Remote Code Execution 7.8 0.0123 Exploitation Less Likely
Urgent CVE-2023-38160 Windows TCP/IP Information Disclosure 5.5 0.0094 More likely
Urgent CVE-2023-36804 Windows GDI Elevation of Privilege 7.8 0.0060 More likely
Urgent CVE-2023-38161 Windows GDI Elevation of Privilege 7.8 0.0059 More likely
High CVE-2023-38162 Windows DHCP Server Denial of Service 7.5 0.1069 Exploitation Less Likely
High CVE-2023-38149 Windows TCP/IP Denial of Service 7.5 0.0448 Exploitation Less Likely
High CVE-2023-36805 Windows Scripting Security Feature Bypass 7.0 0.0176 Exploitation Less Likely
High CVE-2023-36794 .NET and Visual Studio Remote Code Execution 7.8 0.0123 N/A
High CVE-2023-36788 .NET Framework Remote Code Execution 7.8 0.0102 Exploitation Less Likely
High CVE-2023-38139 Windows Kernel Elevation of Privilege 7.8 0.0093 Exploitation Less Likely
High CVE-2023-38147 Microsoft Windows Codecs Library Remote Code Execution 8.8 0.0089 Exploitation Less Likely
High CVE-2023-38141 Windows Kernel Elevation of Privilege 7.8 0.0063 Exploitation Less Likely
Routine CVE-2023-36801 Windows DHCP Server Information Disclosure 5.3 0.0165 Exploitation Less Likely
Routine CVE-2023-38140 Windows Kernel Information Disclosure 5.5 0.0106 Exploitation Less Likely
Routine CVE-2023-36803 Windows Kernel Information Disclosure 5.5 0.0099 Exploitation Less Likely
Showing 1 to 21 of 21 1