Microsoft · Security update · January 9, 2024

KB5034121: January 2024 cumulative update for Windows 11 21H2

KB5034121, released January 9, 2024, fixes 34 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
34
2 rated Critical
Exploited
0
None reported
Exploitation more likely
7
Vendor assessment
Highest EPSS
0.2260
97th percentile

Priority of the 34 CVEs

Patch now 0 Urgent 8 High 9 Routine 17

Applies to

ProductBuild after install
Windows 11 version 21H2 for ARM64-based Systems22000.2713
Windows 11 version 21H2 for x64-based Systems22000.2713

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2024-20674 Windows Authentication Methods Security Feature Bypass 8.8 0.1717 More likely
Urgent CVE-2024-21310 Windows Cloud Files Mini Filter Driver Elevation of Privilege 7.8 0.1160 More likely
Urgent CVE-2024-20698 Windows Kernel Elevation of Privilege 7.8 0.0865 More likely
Urgent CVE-2024-20653 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0449 More likely
Urgent CVE-2024-20683 Windows Win32K Elevation of Privilege 7.8 0.0421 More likely
Urgent CVE-2024-20700 Windows Hyper-V Remote Code Execution 7.5 0.0395 Exploitation Less Likely
Urgent CVE-2024-20652 Windows Scripting Security Feature Bypass 8.1 0.0208 More likely
Urgent CVE-2024-21307 Remote Desktop Client Remote Code Execution 7.5 0.0196 More likely
High CVE-2024-20696 Windows Libarchive Remote Code Execution 7.3 0.0315 Exploitation Less Likely
High CVE-2024-20661 Windows Message Queuing Denial of Service 7.5 0.0276 Exploitation Less Likely
High CVE-2024-20687 Windows AllJoyn API Denial of Service 7.5 0.0250 Exploitation Less Likely
High CVE-2024-20654 Windows ODBC Driver Remote Code Execution 8.0 0.0199 Exploitation Less Likely
High CVE-2024-20682 Windows Cryptographic Services Remote Code Execution 7.8 0.0076 Exploitation Less Likely
High CVE-2024-21309 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.0076 Exploitation Less Likely
High CVE-2024-20658 Microsoft Virtual Hard Drive Elevation of Privilege 7.8 0.0071 Exploitation Less Likely
High CVE-2024-20681 Windows Subsystem for Linux Elevation of Privilege 7.8 0.0070 Exploitation Less Likely
High CVE-2024-20657 Windows Group Policy Elevation of Privilege 7.0 0.0057 Exploitation Less Likely
Routine CVE-2024-21320 Windows Themes Spoofing 6.5 0.2260 Exploitation Less Likely
Routine CVE-2024-21306 Microsoft Bluetooth Driver Spoofing 5.7 0.0583 Exploitation Less Likely
Routine CVE-2024-20666 Windows BitLocker Security Feature Bypass 6.6 0.0310 Exploitation Less Likely
Routine CVE-2024-21314 Windows Message Queuing Information Disclosure 6.5 0.0208 Exploitation Less Likely
Routine CVE-2024-20660 Windows Message Queuing Information Disclosure 6.5 0.0204 Exploitation Less Likely
Routine CVE-2024-20680 Windows Message Queuing Information Disclosure 6.5 0.0204 Exploitation Less Likely
Routine CVE-2024-20664 Windows Message Queuing Information Disclosure 6.5 0.0200 Exploitation Less Likely
Routine CVE-2024-20663 Windows Message Queuing Information Disclosure 6.5 0.0193 Exploitation Less Likely
Showing 1 to 25 of 34 1Next