Microsoft · Security update · May 14, 2024
KB5037803: May 2024 security update
KB5037803, released May 14, 2024, fixes 22 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
UrgentUnsupported product
CVEs closed
22
None rated Critical
Exploited
0
None reported
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.1147
96th percentile
Priority of the 22 CVEs
Patch now 0
Urgent 5
High 13
Routine 4
Applies to
| Product |
|---|
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 |
| Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2024-30050 | Windows Mark of the Web (MOTW) | Security Feature Bypass | 5.4 | 0.1147 | More likely |
| Urgent | CVE-2024-30037 | Windows Common Log File System Driver | Elevation of Privilege | 5.5 | 0.0528 | More likely |
| Urgent | CVE-2024-30025 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0428 | More likely |
| Urgent | CVE-2024-29996 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0335 | More likely |
| Urgent | CVE-2024-30049 | Windows Win32K - ICOMP | Elevation of Privilege | 7.8 | 0.0071 | More likely |
| High | CVE-2024-30006 | Microsoft WDAC OLE DB provider for SQL | Remote Code Execution | 8.8 | 0.0172 | Exploitation Less Likely |
| High | CVE-2024-30009 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 8.8 | 0.0172 | Exploitation Less Likely |
| High | CVE-2024-30022 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 7.5 | 0.0154 | Exploitation Less Likely |
| High | CVE-2024-30023 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 7.5 | 0.0154 | Exploitation Less Likely |
| High | CVE-2024-30024 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 7.5 | 0.0154 | Exploitation Less Likely |
| High | CVE-2024-30014 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 7.5 | 0.0149 | Exploitation Less Likely |
| High | CVE-2024-30015 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 7.5 | 0.0149 | Exploitation Less Likely |
| High | CVE-2024-30029 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 7.5 | 0.0149 | Exploitation Less Likely |
| High | CVE-2024-30020 | Windows Cryptographic Services | Remote Code Execution | 8.1 | 0.0130 | Exploitation Less Likely |
| High | CVE-2024-30028 | Windows Win32K - ICOMP | Elevation of Privilege | 7.8 | 0.0071 | Exploitation Less Likely |
| High | CVE-2024-30030 | Windows Win32K - GRFX | Elevation of Privilege | 7.8 | 0.0071 | Exploitation Less Likely |
| High | CVE-2024-30027 | Windows NTFS | Elevation of Privilege | 7.8 | 0.0064 | Exploitation Less Likely |
| High | CVE-2024-30031 | Windows CNG Key Isolation Service | Elevation of Privilege | 7.8 | 0.0040 | Exploitation Less Likely |
| Routine | CVE-2024-30019 | Windows DHCP Server | Denial of Service | 6.5 | 0.0262 | Exploitation Less Likely |
| Routine | CVE-2024-30036 | Windows Deployment Services | Information Disclosure | 6.5 | 0.0229 | Exploitation Less Likely |
| Routine | CVE-2024-30016 | Windows Cryptographic Services | Information Disclosure | 5.5 | 0.0079 | Exploitation Less Likely |
| Routine | CVE-2024-30039 | Windows Remote Access Connection Manager | Information Disclosure | 5.5 | 0.0074 | Exploitation Less Likely |
Showing 1 to 22 of 22
1