Microsoft · ServicingStack update · May 14, 2024
KB5037781: May 2024 cumulative update for Windows Server 23H2
KB5037781, released May 14, 2024, fixes 48 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.887). One of them is being exploited (CVE-2024-30040); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVUnsupported product
CVEs closed
48
None rated Critical
Exploited
1
CVE-2024-30040
Exploitation more likely
10
Vendor assessment
Highest EPSS
0.1147
96th percentile
Priority of the 48 CVEs
Patch now 1
Urgent 10
High 17
Routine 20
Applies to
| Product | Build after install |
|---|---|
| Windows Server 2022, 23H2 Edition (Server Core installation) | 25398.887 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2024-30040 | Windows MSHTML Platform | Security Feature Bypass | 8.8 | 0.0394 | KEVExploited |
| Urgent | CVE-2024-30050 | Windows Mark of the Web (MOTW) | Security Feature Bypass | 5.4 | 0.1147 | More likely |
| Urgent | CVE-2024-30034 | Windows Cloud Files Mini Filter Driver | Information Disclosure | 5.5 | 0.0688 | More likely |
| Urgent | CVE-2024-30037 | Windows Common Log File System Driver | Elevation of Privilege | 5.5 | 0.0528 | More likely |
| Urgent | CVE-2024-30032 | Windows DWM Core Library | Elevation of Privilege | 7.8 | 0.0452 | More likely |
| Urgent | CVE-2024-30025 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0428 | More likely |
| Urgent | CVE-2024-26211 | Windows Remote Access Connection Manager | Elevation of Privilege | 7.8 | 0.0412 | More likely |
| Urgent | CVE-2024-30035 | Windows DWM Core Library | Elevation of Privilege | 7.8 | 0.0354 | More likely |
| Urgent | CVE-2024-29996 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0335 | More likely |
| Urgent | CVE-2024-30038 | Windows Win32K - ICOMP | Elevation of Privilege | 7.8 | 0.0255 | More likely |
| Urgent | CVE-2024-30049 | Windows Win32K - ICOMP | Elevation of Privilege | 7.8 | 0.0071 | More likely |
| High | CVE-2024-30010 | Windows Hyper-V | Remote Code Execution | 8.8 | 0.0232 | Exploitation Less Likely |
| High | CVE-2024-30017 | Windows Hyper-V | Remote Code Execution | 8.8 | 0.0191 | Exploitation Less Likely |
| High | CVE-2024-30006 | Microsoft WDAC OLE DB provider for SQL | Remote Code Execution | 8.8 | 0.0172 | Exploitation Less Likely |
| High | CVE-2024-30009 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0172 | Exploitation Less Likely |
| High | CVE-2024-30022 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 7.5 | 0.0154 | Exploitation Less Likely |
| High | CVE-2024-30023 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 7.5 | 0.0154 | Exploitation Less Likely |
| High | CVE-2024-30024 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 7.5 | 0.0154 | Exploitation Less Likely |
| High | CVE-2024-30014 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 7.5 | 0.0149 | Exploitation Less Likely |
| High | CVE-2024-30015 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 7.5 | 0.0149 | Exploitation Less Likely |
| High | CVE-2024-30029 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 7.5 | 0.0149 | Exploitation Less Likely |
| High | CVE-2024-30020 | Windows Cryptographic Services | Remote Code Execution | 8.1 | 0.0130 | Exploitation Less Likely |
| High | CVE-2024-30018 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0088 | Exploitation Less Likely |
| High | CVE-2024-30028 | Windows Win32K - ICOMP | Elevation of Privilege | 7.8 | 0.0071 | Exploitation Less Likely |
| High | CVE-2024-29994 | Microsoft Windows SCSI Class System File | Elevation of Privilege | 7.8 | 0.0067 | Exploitation Less Likely |
Showing 1 to 25 of 48
1Next