Microsoft · Security update · May 14, 2024

KB5037768: May 2024 cumulative update for Windows 10 21H2

KB5037768, released May 14, 2024, fixes 47 CVEs across 6 products. 2 of them are being exploited (CVE-2024-30051); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
47
None rated Critical
Exploited
2
CVE-2024-30051
Exploitation more likely
10
Vendor assessment
Highest EPSS
0.1147
96th percentile

Priority of the 47 CVEs

Patch now 2 Urgent 10 High 17 Routine 18

Applies to

Product
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-30051 Windows DWM Core Library Elevation of Privilege 7.8 0.0569 KEVRansomwareDisclosedExploited
Patch now CVE-2024-30040 Windows MSHTML Platform Security Feature Bypass 8.8 0.0394 KEVExploited
Urgent CVE-2024-30050 Windows Mark of the Web (MOTW) Security Feature Bypass 5.4 0.1147 More likely
Urgent CVE-2024-30034 Windows Cloud Files Mini Filter Driver Information Disclosure 5.5 0.0688 More likely
Urgent CVE-2024-30037 Windows Common Log File System Driver Elevation of Privilege 5.5 0.0528 More likely
Urgent CVE-2024-30032 Windows DWM Core Library Elevation of Privilege 7.8 0.0452 More likely
Urgent CVE-2024-30025 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0428 More likely
Urgent CVE-2024-26211 Windows Remote Access Connection Manager Elevation of Privilege 7.8 0.0412 More likely
Urgent CVE-2024-30035 Windows DWM Core Library Elevation of Privilege 7.8 0.0354 More likely
Urgent CVE-2024-29996 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0335 More likely
Urgent CVE-2024-30038 Windows Win32K - ICOMP Elevation of Privilege 7.8 0.0255 More likely
Urgent CVE-2024-30049 Windows Win32K - ICOMP Elevation of Privilege 7.8 0.0071 More likely
High CVE-2024-30017 Windows Hyper-V Remote Code Execution 8.8 0.0191 Exploitation Less Likely
High CVE-2024-30006 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0172 Exploitation Less Likely
High CVE-2024-30009 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0172 Exploitation Less Likely
High CVE-2024-30022 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0154 Exploitation Less Likely
High CVE-2024-30023 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0154 Exploitation Less Likely
High CVE-2024-30024 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0154 Exploitation Less Likely
High CVE-2024-30014 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0149 Exploitation Less Likely
High CVE-2024-30015 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0149 Exploitation Less Likely
High CVE-2024-30029 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0149 Exploitation Less Likely
High CVE-2024-30020 Windows Cryptographic Services Remote Code Execution 8.1 0.0130 Exploitation Less Likely
High CVE-2024-30033 Microsoft Windows Search Component Elevation of Privilege 7.0 0.0096 Exploitation Less Likely
High CVE-2024-30018 Windows Kernel Elevation of Privilege 7.8 0.0088 Exploitation Less Likely
High CVE-2024-26238 Windows Task Scheduler Elevation of Privilege 7.8 0.0082 Exploitation Less Likely
Showing 1 to 25 of 47 1Next