Microsoft · Security update · May 14, 2024

KB5037770: May 2024 cumulative update for Windows 11 21H2

KB5037770, released May 14, 2024, fixes 41 CVEs across 2 products. 2 of them are being exploited (CVE-2024-30051); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware use1 publicly disclosedUnsupported product
CVEs closed
41
None rated Critical
Exploited
2
CVE-2024-30051
Exploitation more likely
9
Vendor assessment
Highest EPSS
0.1147
96th percentile

Priority of the 41 CVEs

Patch now 2 Urgent 9 High 16 Routine 14

Applies to

ProductBuild after install
Windows 11 version 21H2 for ARM64-based Systems22000.2960
Windows 11 version 21H2 for x64-based Systems22000.2960

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-30051 Windows DWM Core Library Elevation of Privilege 7.8 0.0569 KEVRansomwareDisclosedExploited
Patch now CVE-2024-30040 Windows MSHTML Platform Security Feature Bypass 8.8 0.0394 KEVExploited
Urgent CVE-2024-30050 Windows Mark of the Web (MOTW) Security Feature Bypass 5.4 0.1147 More likely
Urgent CVE-2024-30034 Windows Cloud Files Mini Filter Driver Information Disclosure 5.5 0.0688 More likely
Urgent CVE-2024-30037 Windows Common Log File System Driver Elevation of Privilege 5.5 0.0528 More likely
Urgent CVE-2024-30032 Windows DWM Core Library Elevation of Privilege 7.8 0.0452 More likely
Urgent CVE-2024-30025 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0428 More likely
Urgent CVE-2024-30035 Windows DWM Core Library Elevation of Privilege 7.8 0.0354 More likely
Urgent CVE-2024-29996 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0335 More likely
Urgent CVE-2024-30038 Windows Win32K - ICOMP Elevation of Privilege 7.8 0.0255 More likely
Urgent CVE-2024-30049 Windows Win32K - ICOMP Elevation of Privilege 7.8 0.0071 More likely
High CVE-2024-30017 Windows Hyper-V Remote Code Execution 8.8 0.0191 Exploitation Less Likely
High CVE-2024-30006 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0172 Exploitation Less Likely
High CVE-2024-30009 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0172 Exploitation Less Likely
High CVE-2024-30022 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0154 Exploitation Less Likely
High CVE-2024-30023 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0154 Exploitation Less Likely
High CVE-2024-30024 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0154 Exploitation Less Likely
High CVE-2024-30014 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0149 Exploitation Less Likely
High CVE-2024-30015 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0149 Exploitation Less Likely
High CVE-2024-30029 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0149 Exploitation Less Likely
High CVE-2024-30020 Windows Cryptographic Services Remote Code Execution 8.1 0.0130 Exploitation Less Likely
High CVE-2024-30033 Microsoft Windows Search Component Elevation of Privilege 7.0 0.0096 Exploitation Less Likely
High CVE-2024-30018 Windows Kernel Elevation of Privilege 7.8 0.0088 Exploitation Less Likely
High CVE-2024-30028 Windows Win32K - ICOMP Elevation of Privilege 7.8 0.0071 Exploitation Less Likely
High CVE-2024-29994 Microsoft Windows SCSI Class System File Elevation of Privilege 7.8 0.0067 Exploitation Less Likely
Showing 1 to 25 of 41 1Next