Microsoft · Security update · June 11, 2024

KB5039211: June 2024 cumulative update for Windows 10 21H2

KB5039211, released June 11, 2024, fixes 28 CVEs across 6 products. 3 of them are being exploited (CVE-2024-30088); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEVKnown ransomware use
CVEs closed
28
1 rated Critical
Exploited
3
CVE-2024-30088
Exploitation more likely
9
Vendor assessment
Highest EPSS
0.6820
99th percentile

Priority of the 28 CVEs

Patch now 3 Urgent 9 High 9 Routine 7

Applies to

Product
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-30088 Windows NT OS Kernel Elevation of Privilege 7.0 0.6820 KEVRansomwareExploited
Patch now CVE-2024-35250 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.2522 KEVExploited
Patch now CVE-2024-38213 Windows Mark of the Web (MOTW) Security Feature Bypass 6.5 0.1363 KEVExploited
Urgent CVE-2024-30080 Windows Server Service Remote Code Execution 9.8 0.4287 More likely
Urgent CVE-2024-30085 Windows Cloud Files Mini Filter Driver Elevation of Privilege 7.8 0.1432 More likely
Urgent CVE-2024-30087 Windows Win32K - GRFX Elevation of Privilege 7.8 0.0951 More likely
Urgent CVE-2024-30089 Microsoft Streaming Service Elevation of Privilege 7.8 0.0810 More likely
Urgent CVE-2024-30084 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0591 More likely
Urgent CVE-2024-30091 Windows Win32K - GRFX Elevation of Privilege 7.8 0.0426 More likely
Urgent CVE-2024-30082 Windows Win32K - GRFX Elevation of Privilege 7.8 0.0127 More likely
Urgent CVE-2024-30086 Windows Win32 Kernel Subsystem Elevation of Privilege 7.8 0.0112 More likely
Urgent CVE-2024-30099 Windows NT OS Kernel Elevation of Privilege 7.0 0.0054 More likely
High CVE-2024-30078 Windows Wi-Fi Driver Remote Code Execution 8.8 0.0520 Exploitation Less Likely
High CVE-2024-30090 Microsoft Streaming Service Elevation of Privilege 7.0 0.0198 Exploitation Less Likely
High CVE-2024-30077 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.0 0.0180 Exploitation Less Likely
High CVE-2024-30097 Microsoft Windows Speech Remote Code Execution 8.8 0.0173 Exploitation Less Likely
High CVE-2024-30093 Windows Storage Elevation of Privilege 7.3 0.0115 Exploitation Less Likely
High CVE-2024-30095 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.8 0.0101 Exploitation Less Likely
High CVE-2024-30094 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.8 0.0091 Exploitation Less Likely
High CVE-2024-30068 Windows Kernel Elevation of Privilege 8.8 0.0078 Exploitation Less Likely
High CVE-2024-35265 Windows Perception Service Elevation of Privilege 7.0 0.0037 Exploitation Less Likely
Routine CVE-2024-30076 Windows Container Manager Service Elevation of Privilege 6.8 0.0171 Exploitation Less Likely
Routine CVE-2024-30063 Windows Distributed File System (DFS) Remote Code Execution 6.7 0.0102 Exploitation Less Likely
Routine CVE-2024-30096 Windows Cryptographic Services Information Disclosure 5.5 0.0096 Exploitation Less Likely
Routine CVE-2024-30065 Windows Themes Denial of Service 5.5 0.0084 Exploitation Less Likely
Showing 1 to 25 of 28 1Next