Microsoft · Security update · May 14, 2024

KB5037823: May 2024 security update

KB5037823, released May 14, 2024, fixes 29 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
29
None rated Critical
Exploited
0
None reported
Exploitation more likely
7
Vendor assessment
Highest EPSS
0.1147
96th percentile

Priority of the 29 CVEs

Patch now 0 Urgent 7 High 13 Routine 9

Applies to

Product
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2024-30050 Windows Mark of the Web (MOTW) Security Feature Bypass 5.4 0.1147 More likely
Urgent CVE-2024-30037 Windows Common Log File System Driver Elevation of Privilege 5.5 0.0528 More likely
Urgent CVE-2024-30025 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0428 More likely
Urgent CVE-2024-26211 Windows Remote Access Connection Manager Elevation of Privilege 7.8 0.0412 More likely
Urgent CVE-2024-29996 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0335 More likely
Urgent CVE-2024-30038 Windows Win32K - ICOMP Elevation of Privilege 7.8 0.0255 More likely
Urgent CVE-2024-30049 Windows Win32K - ICOMP Elevation of Privilege 7.8 0.0071 More likely
High CVE-2024-30010 Windows Hyper-V Remote Code Execution 8.8 0.0232 Exploitation Less Likely
High CVE-2024-30006 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0172 Exploitation Less Likely
High CVE-2024-30009 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 8.8 0.0172 Exploitation Less Likely
High CVE-2024-30022 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0154 Exploitation Less Likely
High CVE-2024-30023 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0154 Exploitation Less Likely
High CVE-2024-30024 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0154 Exploitation Less Likely
High CVE-2024-30014 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0149 Exploitation Less Likely
High CVE-2024-30015 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0149 Exploitation Less Likely
High CVE-2024-30029 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.5 0.0149 Exploitation Less Likely
High CVE-2024-30020 Windows Cryptographic Services Remote Code Execution 8.1 0.0130 Exploitation Less Likely
High CVE-2024-30028 Windows Win32K - ICOMP Elevation of Privilege 7.8 0.0071 Exploitation Less Likely
High CVE-2024-30027 Windows NTFS Elevation of Privilege 7.8 0.0064 Exploitation Less Likely
High CVE-2024-30031 Windows CNG Key Isolation Service Elevation of Privilege 7.8 0.0040 Exploitation Less Likely
Routine CVE-2024-30011 Windows Hyper-V Denial of Service 6.5 0.0262 Exploitation Less Likely
Routine CVE-2024-30019 Windows DHCP Server Denial of Service 6.5 0.0262 Exploitation Less Likely
Routine CVE-2024-30036 Windows Deployment Services Information Disclosure 6.5 0.0229 Exploitation Less Likely
Routine CVE-2024-30016 Windows Cryptographic Services Information Disclosure 5.5 0.0079 Exploitation Less Likely
Routine CVE-2024-26207 Windows Remote Access Connection Manager Information Disclosure 5.5 0.0076 Exploitation Less Likely
Showing 1 to 25 of 29 1Next