Microsoft · Security update · January 9, 2024

KB5034119: January 2024 cumulative update for Windows 10 1607

KB5034119, released January 9, 2024, fixes 30 CVEs across 8 products. One of them is being exploited (CVE-2024-29059); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
30
1 rated Critical
Exploited
1
CVE-2024-29059
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.9862
99th percentile

Priority of the 30 CVEs

Patch now 1 Urgent 5 High 9 Routine 15

Applies to

ProductBuild after install
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1607 for 32-bit Systems14393.6614
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1607 for x64-based Systems14393.6614
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 201614393.6614
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016 (Server Core installation)14393.6614
Windows 10 Version 1607 for 32-bit Systems14393.6614
Windows 10 Version 1607 for x64-based Systems14393.6614
Windows Server 201614393.6614
Windows Server 2016 (Server Core installation)14393.6614

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-29059 .NET Framework Information Disclosure 7.5 0.9862 KEVExploited
Urgent CVE-2024-20674 Windows Authentication Methods Security Feature Bypass 8.8 0.1717 More likely
Urgent CVE-2024-20653 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0449 More likely
Urgent CVE-2024-20683 Windows Win32K Elevation of Privilege 7.8 0.0421 More likely
Urgent CVE-2024-20652 Windows Scripting Security Feature Bypass 8.1 0.0208 More likely
Urgent CVE-2024-21307 Remote Desktop Client Remote Code Execution 7.5 0.0196 More likely
High CVE-2024-21312 .NET Framework Denial of Service 7.5 0.0358 Exploitation Less Likely
High CVE-2024-0057 .NET and Visual Studio Security Feature Bypass 9.8 0.0278 Exploitation Less Likely
High CVE-2024-20661 Windows Message Queuing Denial of Service 7.5 0.0276 Exploitation Less Likely
High CVE-2024-20687 Windows AllJoyn API Denial of Service 7.5 0.0250 Exploitation Less Likely
High CVE-2024-20654 Windows ODBC Driver Remote Code Execution 8.0 0.0199 Exploitation Less Likely
High CVE-2024-0056 SQL Server Security Feature Bypass 8.7 0.0118 Exploitation Less Likely
High CVE-2024-20682 Windows Cryptographic Services Remote Code Execution 7.8 0.0076 Exploitation Less Likely
High CVE-2024-20658 Microsoft Virtual Hard Drive Elevation of Privilege 7.8 0.0071 Exploitation Less Likely
High CVE-2024-20657 Windows Group Policy Elevation of Privilege 7.0 0.0057 Exploitation Less Likely
Routine CVE-2024-21320 Windows Themes Spoofing 6.5 0.2260 Exploitation Less Likely
Routine CVE-2024-20666 Windows BitLocker Security Feature Bypass 6.6 0.0310 Exploitation Less Likely
Routine CVE-2024-21314 Windows Message Queuing Information Disclosure 6.5 0.0208 Exploitation Less Likely
Routine CVE-2024-20660 Windows Message Queuing Information Disclosure 6.5 0.0204 Exploitation Less Likely
Routine CVE-2024-20680 Windows Message Queuing Information Disclosure 6.5 0.0204 Exploitation Less Likely
Routine CVE-2024-20664 Windows Message Queuing Information Disclosure 6.5 0.0200 Exploitation Less Likely
Routine CVE-2024-20663 Windows Message Queuing Information Disclosure 6.5 0.0193 Exploitation Less Likely
Routine CVE-2024-20662 Windows Online Certificate Status Protocol (OCSP) SnapIn Information Disclosure 4.9 0.0192 Exploitation Less Likely
Routine CVE-2024-21313 Windows TCP/IP Information Disclosure 5.3 0.0150 Exploitation Less Likely
Routine CVE-2024-21316 Windows Server Key Distribution Service Security Feature Bypass 6.1 0.0148 Exploitation Less Likely
Showing 1 to 25 of 30 1Next