Microsoft · Security update · May 14, 2024

KB5037788: May 2024 cumulative update for Windows 10 1507

KB5037788, released May 14, 2024, fixes 30 CVEs across 2 products. 2 of them are being exploited (CVE-2024-30051); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware use1 publicly disclosedUnsupported product
CVEs closed
30
None rated Critical
Exploited
2
CVE-2024-30051
Exploitation more likely
8
Vendor assessment
Highest EPSS
0.1147
96th percentile

Priority of the 30 CVEs

Patch now 2 Urgent 8 High 13 Routine 7

Applies to

ProductBuild after install
Windows 10 for 32-bit Systems10240.20651
Windows 10 for x64-based Systems10240.20651

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-30051 Windows DWM Core Library Elevation of Privilege 7.8 0.0569 KEVRansomwareDisclosedExploited
Patch now CVE-2024-30040 Windows MSHTML Platform Security Feature Bypass 8.8 0.0394 KEVExploited
Urgent CVE-2024-30050 Windows Mark of the Web (MOTW) Security Feature Bypass 5.4 0.1147 More likely
Urgent CVE-2024-30037 Windows Common Log File System Driver Elevation of Privilege 5.5 0.0528 More likely
Urgent CVE-2024-30032 Windows DWM Core Library Elevation of Privilege 7.8 0.0452 More likely
Urgent CVE-2024-30025 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0428 More likely
Urgent CVE-2024-26211 Windows Remote Access Connection Manager Elevation of Privilege 7.8 0.0412 More likely
Urgent CVE-2024-29996 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0335 More likely
Urgent CVE-2024-30038 Windows Win32K - ICOMP Elevation of Privilege 7.8 0.0255 More likely
Urgent CVE-2024-30049 Windows Win32K - ICOMP Elevation of Privilege 7.8 0.0071 More likely
High CVE-2024-30017 Windows Hyper-V Remote Code Execution 8.8 0.0191 Exploitation Less Likely
High CVE-2024-30006 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0172 Exploitation Less Likely
High CVE-2024-30009 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0172 Exploitation Less Likely
High CVE-2024-30022 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0154 Exploitation Less Likely
High CVE-2024-30023 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0154 Exploitation Less Likely
High CVE-2024-30024 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0154 Exploitation Less Likely
High CVE-2024-30014 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0149 Exploitation Less Likely
High CVE-2024-30015 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0149 Exploitation Less Likely
High CVE-2024-30029 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0149 Exploitation Less Likely
High CVE-2024-30020 Windows Cryptographic Services Remote Code Execution 8.1 0.0130 Exploitation Less Likely
High CVE-2024-30028 Windows Win32K - ICOMP Elevation of Privilege 7.8 0.0071 Exploitation Less Likely
High CVE-2024-30027 Windows NTFS Elevation of Privilege 7.8 0.0064 Exploitation Less Likely
High CVE-2024-30031 Windows CNG Key Isolation Service Elevation of Privilege 7.8 0.0040 Exploitation Less Likely
Routine CVE-2024-30008 Windows DWM Core Library Information Disclosure 5.5 0.0079 Exploitation Less Likely
Routine CVE-2024-30016 Windows Cryptographic Services Information Disclosure 5.5 0.0079 Exploitation Less Likely
Showing 1 to 25 of 30 1Next