Microsoft · Security update · April 9, 2024

KB5036893: April 2024 cumulative update for Windows 11 22H2

KB5036893, released April 9, 2024, fixes 63 CVEs across 4 products. 2 of them are being exploited (CVE-2024-29988); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV1 publicly disclosed

CVEs closed

None rated Critical

Exploited

CVE-2024-29988

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.8790

99th percentile

Priority of the 63 CVEs

Patch now 2
                                Urgent 9
                                High 31
                                Routine 21

Applies to

Product
Windows 11 Version 22H2 for ARM64-based Systems
Windows 11 Version 22H2 for x64-based Systems
Windows 11 Version 23H2 for ARM64-based Systems
Windows 11 Version 23H2 for x64-based Systems

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2024-29988	Internet Shortcut Files	Security Feature Bypass	8.8	0.4515	KEVExploited
Patch now	CVE-2024-26234	Windows Proxy Driver	Spoofing	6.7	0.0485	DisclosedExploited
Urgent	CVE-2024-26256	Windows Compressed Folder	Remote Code Execution	7.8	0.8790	More likely
Urgent	CVE-2024-26230	Windows Remote Access Connection Manager	Elevation of Privilege	7.8	0.2411	More likely
Urgent	CVE-2024-26209	Windows Local Security Authority Subsystem Service (LSASS)	Information Disclosure	5.5	0.1481	More likely
Urgent	CVE-2024-26218	Windows Kernel	Elevation of Privilege	7.8	0.1292	More likely
Urgent	CVE-2024-26158	Microsoft Install Service	Elevation of Privilege	7.8	0.1226	More likely
Urgent	CVE-2024-28921	Windows Secure Boot	Security Feature Bypass	6.7	0.0073	More likely
Urgent	CVE-2024-28903	Windows Secure Boot	Security Feature Bypass	6.7	0.0073	More likely
Urgent	CVE-2024-26241	Windows Win32K - ICOMP	Elevation of Privilege	7.8	0.0073	More likely
Urgent	CVE-2024-26239	Windows Remote Access Connection Manager	Elevation of Privilege	7.8	0.0058	More likely
High	CVE-2024-26229	Windows Kernel	Elevation of Privilege	7.8	0.0938	Exploitation Less Likely
High	CVE-2024-26219	Windows HTTP.sys	Denial of Service	7.5	0.0314	Exploitation Less Likely
High	CVE-2024-26254	Windows Virtual Machine Bus	Denial of Service	7.5	0.0314	Exploitation Less Likely
High	CVE-2024-20678	Windows Remote Procedure Call	Remote Code Execution	8.8	0.0252	Exploitation Less Likely
High	CVE-2024-26208	Windows Message Queuing	Remote Code Execution	7.2	0.0228	Exploitation Less Likely
High	CVE-2024-26214	Microsoft WDAC ODBC Driver	Remote Code Execution	8.8	0.0202	Exploitation Less Likely
High	CVE-2024-26210	Microsoft WDAC OLE DB provider for SQL	Remote Code Execution	8.8	0.0196	Exploitation Less Likely
High	CVE-2024-26244	Microsoft WDAC OLE DB provider for SQL	Remote Code Execution	8.8	0.0196	Exploitation Less Likely
High	CVE-2024-26179	Windows Routing and Remote Access Service (RRAS)	Remote Code Execution	8.8	0.0181	Exploitation Less Likely
High	CVE-2024-26200	Windows Routing and Remote Access Service (RRAS)	Remote Code Execution	8.8	0.0181	Exploitation Less Likely
High	CVE-2024-26205	Windows Routing and Remote Access Service (RRAS)	Remote Code Execution	8.8	0.0181	Exploitation Less Likely
High	CVE-2024-26180	Windows Secure Boot	Security Feature Bypass	8.0	0.0145	Exploitation Less Likely
High	CVE-2024-21447	Windows Authentication Methods	Elevation of Privilege	7.8	0.0138	Exploitation Less Likely
High	CVE-2024-26189	Windows Secure Boot	Security Feature Bypass	8.0	0.0136	Exploitation Less Likely

Released the same day

KB5002580
Microsoft SharePoint Server 2019
KB5002581
Microsoft SharePoint Server Subscription Edition
KB5002583
Microsoft SharePoint Server 2016
KB5036609
Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2016 and 1 more
KB5036620
Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for ARM64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based Systems and 1 more
KB5036892
Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems and 3 more
KB5036894
Windows 11 version 21H2 for ARM64-based Systems, Windows 11 version 21H2 for x64-based Systems
KB5036896
Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for ARM64-based Systems, Windows 10 Version 1809 for x64-based Systems and 2 more
KB5036899
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016 and 5 more
KB5036909
Windows Server 2022, Windows Server 2022 (Server Core installation)
KB5036910
Windows Server 2022, 23H2 Edition (Server Core installation)
KB5036922
Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

Vendor advisory

https://support.microsoft.com/help/5036893

For tools and AI agents

This page as data: JSON · Markdown

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.