Microsoft · Security update · January 9, 2024

KB5034134: January 2024 cumulative update for Windows 10 1507

KB5034134, released January 9, 2024, fixes 23 CVEs across 4 products. One of them is being exploited (CVE-2024-29059); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product
CVEs closed
23
1 rated Critical
Exploited
1
CVE-2024-29059
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.9862
99th percentile

Priority of the 23 CVEs

Patch now 1 Urgent 5 High 6 Routine 11

Applies to

ProductBuild after install
Microsoft .NET Framework 3.5 AND 4.6/4.6.2 on Windows 10 for 32-bit Systems10240.20402
Microsoft .NET Framework 3.5 AND 4.6/4.6.2 on Windows 10 for x64-based Systems10240.20402
Windows 10 for 32-bit Systems10240.20402
Windows 10 for x64-based Systems10240.20402

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-29059 .NET Framework Information Disclosure 7.5 0.9862 KEVExploited
Urgent CVE-2024-20674 Windows Authentication Methods Security Feature Bypass 8.8 0.1717 More likely
Urgent CVE-2024-20653 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0449 More likely
Urgent CVE-2024-20683 Windows Win32K Elevation of Privilege 7.8 0.0421 More likely
Urgent CVE-2024-20652 Windows Scripting Security Feature Bypass 8.1 0.0208 More likely
Urgent CVE-2024-21307 Remote Desktop Client Remote Code Execution 7.5 0.0196 More likely
High CVE-2024-20661 Windows Message Queuing Denial of Service 7.5 0.0276 Exploitation Less Likely
High CVE-2024-20687 Windows AllJoyn API Denial of Service 7.5 0.0250 Exploitation Less Likely
High CVE-2024-20654 Windows ODBC Driver Remote Code Execution 8.0 0.0199 Exploitation Less Likely
High CVE-2024-20682 Windows Cryptographic Services Remote Code Execution 7.8 0.0076 Exploitation Less Likely
High CVE-2024-20658 Microsoft Virtual Hard Drive Elevation of Privilege 7.8 0.0071 Exploitation Less Likely
High CVE-2024-20657 Windows Group Policy Elevation of Privilege 7.0 0.0057 Exploitation Less Likely
Routine CVE-2024-21320 Windows Themes Spoofing 6.5 0.2260 Exploitation Less Likely
Routine CVE-2024-20666 Windows BitLocker Security Feature Bypass 6.6 0.0310 Exploitation Less Likely
Routine CVE-2024-21314 Windows Message Queuing Information Disclosure 6.5 0.0208 Exploitation Less Likely
Routine CVE-2024-20660 Windows Message Queuing Information Disclosure 6.5 0.0204 Exploitation Less Likely
Routine CVE-2024-20680 Windows Message Queuing Information Disclosure 6.5 0.0204 Exploitation Less Likely
Routine CVE-2024-20664 Windows Message Queuing Information Disclosure 6.5 0.0200 Exploitation Less Likely
Routine CVE-2024-20663 Windows Message Queuing Information Disclosure 6.5 0.0193 Exploitation Less Likely
Routine CVE-2024-21313 Windows TCP/IP Information Disclosure 5.3 0.0150 Exploitation Less Likely
Routine CVE-2024-20692 Windows Local Security Authority Subsystem Service (LSASS) Information Disclosure 5.7 0.0118 Exploitation Less Likely
Routine CVE-2024-21311 Windows Cryptographic Services Information Disclosure 5.5 0.0078 Exploitation Less Likely
Routine CVE-2024-20691 Windows Themes Information Disclosure 4.7 0.0059 Exploitation Less Likely
Showing 1 to 23 of 23 1