Microsoft · Security update · October 10, 2023

KB5031377: October 2023 cumulative update for Windows 10 1507

KB5031377, released October 10, 2023, fixes 62 CVEs across 2 products. 2 of them are being exploited (CVE-2023-36563); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
62
12 rated Critical
Exploited
2
CVE-2023-36563
Exploitation more likely
7
Microsoft's assessment
Highest EPSS
0.6936
99th percentile

Priority of the 62 CVEs

Patch now 2 Urgent 19 High 37 Routine 4

Applies to

ProductBuild after install
Windows 10 for 32-bit Systems10240.20232
Windows 10 for x64-based Systems10240.20232

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2023-36563 Microsoft WordPadInformation Disclosure6.5 0.2032 KEVDisclosedExploited
Patch now CVE-2023-36584 Windows Mark of the Web (MOTW)Security Feature Bypass5.4 0.0325 KEVExploited
Urgent CVE-2023-36594 Microsoft Graphics ComponentElevation of Privilege7.8 0.0800 More likely
Urgent CVE-2023-36713 Windows Common Log File System DriverInformation Disclosure5.5 0.0733 More likely
Urgent CVE-2023-36731 Windows Win32KElevation of Privilege7.8 0.0662 More likely
Urgent CVE-2023-38159 Microsoft Graphics ComponentElevation of Privilege7.0 0.0406 More likely
Urgent CVE-2023-36743 Windows Win32KElevation of Privilege7.8 0.0363 More likely
Urgent CVE-2023-35349 Windows Message QueuingRemote Code Execution9.8 0.0289 Exploitation Less Likely
Urgent CVE-2023-36697 Windows Message QueuingRemote Code Execution6.8 0.0220 Exploitation Less Likely
Urgent CVE-2023-36776 Windows Win32KElevation of Privilege7.0 0.0205 More likely
Urgent CVE-2023-36718 Windows Virtual Trusted Platform ModuleRemote Code Execution7.8 0.0133 Exploitation Less Likely
Urgent CVE-2023-41773 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0131 Exploitation Less Likely
Urgent CVE-2023-41774 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0131 Exploitation Less Likely
Urgent CVE-2023-38166 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41765 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41767 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41768 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41769 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41770 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41771 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-36732 Windows Win32KElevation of Privilege7.8 0.0063 More likely
High CVE-2023-36606 Windows Message QueuingDenial of Service7.5 0.6936 Exploitation Less Likely
High CVE-2023-36709 Windows AllJoyn APIDenial of Service7.5 0.0268 Exploitation Less Likely
High CVE-2023-36585 Windows UPnP Device HostDenial of Service7.5 0.0260 Exploitation Less Likely
High CVE-2023-36431 Windows Message QueuingDenial of Service7.5 0.0248 Exploitation Less Likely
Showing 1 to 25 of 62 1Next

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.