Microsoft · Security update · June 11, 2024
KB5039225: June 2024 cumulative update for Windows 10 1507
KB5039225, released June 11, 2024, fixes 23 CVEs across 2 products. 3 of them are being exploited (CVE-2024-30088); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now3 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
23
1 rated Critical
Exploited
3
CVE-2024-30088
Exploitation more likely
7
Vendor assessment
Highest EPSS
0.6820
99th percentile
Priority of the 23 CVEs
Patch now 3
Urgent 7
High 8
Routine 5
Applies to
| Product | Build after install |
|---|---|
| Windows 10 for 32-bit Systems | 10240.20680 |
| Windows 10 for x64-based Systems | 10240.20680 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2024-30088 | Windows NT OS Kernel | Elevation of Privilege | 7.0 | 0.6820 | KEVRansomwareExploited |
| Patch now | CVE-2024-35250 | Windows Kernel-Mode Drivers | Elevation of Privilege | 7.8 | 0.2522 | KEVExploited |
| Patch now | CVE-2024-38213 | Windows Mark of the Web (MOTW) | Security Feature Bypass | 6.5 | 0.1363 | KEVExploited |
| Urgent | CVE-2024-30080 | Windows Server Service | Remote Code Execution | 9.8 | 0.4287 | More likely |
| Urgent | CVE-2024-30087 | Windows Win32K - GRFX | Elevation of Privilege | 7.8 | 0.0951 | More likely |
| Urgent | CVE-2024-30084 | Windows Kernel-Mode Drivers | Elevation of Privilege | 7.0 | 0.0591 | More likely |
| Urgent | CVE-2024-30091 | Windows Win32K - GRFX | Elevation of Privilege | 7.8 | 0.0426 | More likely |
| Urgent | CVE-2024-30082 | Windows Win32K - GRFX | Elevation of Privilege | 7.8 | 0.0127 | More likely |
| Urgent | CVE-2024-30086 | Windows Win32 Kernel Subsystem | Elevation of Privilege | 7.8 | 0.0112 | More likely |
| Urgent | CVE-2024-30099 | Windows NT OS Kernel | Elevation of Privilege | 7.0 | 0.0054 | More likely |
| High | CVE-2024-30078 | Windows Wi-Fi Driver | Remote Code Execution | 8.8 | 0.0520 | Exploitation Less Likely |
| High | CVE-2024-30090 | Microsoft Streaming Service | Elevation of Privilege | 7.0 | 0.0198 | Exploitation Less Likely |
| High | CVE-2024-30077 | Microsoft WDAC OLE DB provider for SQL | Remote Code Execution | 8.0 | 0.0180 | Exploitation Less Likely |
| High | CVE-2024-30097 | Microsoft Windows Speech | Remote Code Execution | 8.8 | 0.0173 | Exploitation Less Likely |
| High | CVE-2024-30093 | Windows Storage | Elevation of Privilege | 7.3 | 0.0115 | Exploitation Less Likely |
| High | CVE-2024-30095 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 7.8 | 0.0101 | Exploitation Less Likely |
| High | CVE-2024-30094 | Windows Routing and Remote Access Service (RRAS) | Remote Code Execution | 7.8 | 0.0091 | Exploitation Less Likely |
| High | CVE-2024-30068 | Windows Kernel | Elevation of Privilege | 8.8 | 0.0078 | Exploitation Less Likely |
| Routine | CVE-2024-30063 | Windows Distributed File System (DFS) | Remote Code Execution | 6.7 | 0.0102 | Exploitation Less Likely |
| Routine | CVE-2024-30065 | Windows Themes | Denial of Service | 5.5 | 0.0084 | Exploitation Less Likely |
| Routine | CVE-2024-30066 | Winlogon | Elevation of Privilege | 5.5 | 0.0063 | Exploitation Less Likely |
| Routine | CVE-2024-30067 | Winlogon | Elevation of Privilege | 5.5 | 0.0063 | Exploitation Less Likely |
| Routine | CVE-2024-30069 | Windows Remote Access Connection Manager | Information Disclosure | 4.7 | 0.0057 | Exploitation Less Likely |
Showing 1 to 23 of 23
1