Microsoft · ServicingStack update · June 11, 2024

KB5039236: June 2024 cumulative update for Windows Server 23H2

KB5039236, released June 11, 2024, fixes 30 CVEs in Windows Server 2022, 23H2 Edition (Server Core installation) (build 25398.950). 3 of them are being exploited (CVE-2024-30088); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now3 on CISA KEVKnown ransomware use1 publicly disclosedUnsupported product
CVEs closed
30
1 rated Critical
Exploited
3
CVE-2024-30088
Exploitation more likely
9
Vendor assessment
Highest EPSS
0.7430
99th percentile

Priority of the 30 CVEs

Patch now 3 Urgent 9 High 11 Routine 7

Applies to

ProductBuild after install
Windows Server 2022, 23H2 Edition (Server Core installation)25398.950

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-30088 Windows NT OS Kernel Elevation of Privilege 7.0 0.6820 KEVRansomwareExploited
Patch now CVE-2024-35250 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.2522 KEVExploited
Patch now CVE-2024-38213 Windows Mark of the Web (MOTW) Security Feature Bypass 6.5 0.1363 KEVExploited
Urgent CVE-2024-30080 Windows Server Service Remote Code Execution 9.8 0.4287 More likely
Urgent CVE-2024-30085 Windows Cloud Files Mini Filter Driver Elevation of Privilege 7.8 0.1432 More likely
Urgent CVE-2024-30087 Windows Win32K - GRFX Elevation of Privilege 7.8 0.0951 More likely
Urgent CVE-2024-30089 Microsoft Streaming Service Elevation of Privilege 7.8 0.0810 More likely
Urgent CVE-2024-30084 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0591 More likely
Urgent CVE-2024-30091 Windows Win32K - GRFX Elevation of Privilege 7.8 0.0426 More likely
Urgent CVE-2024-30082 Windows Win32K - GRFX Elevation of Privilege 7.8 0.0127 More likely
Urgent CVE-2024-30086 Windows Win32 Kernel Subsystem Elevation of Privilege 7.8 0.0112 More likely
Urgent CVE-2024-30099 Windows NT OS Kernel Elevation of Privilege 7.0 0.0054 More likely
High CVE-2023-50868 Microsoft Windows Denial of Service 7.5 0.7430 DisclosedExploitation Less Likely
High CVE-2024-30078 Windows Wi-Fi Driver Remote Code Execution 8.8 0.0520 Exploitation Less Likely
High CVE-2024-30090 Microsoft Streaming Service Elevation of Privilege 7.0 0.0198 Exploitation Less Likely
High CVE-2024-30077 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.0 0.0180 Exploitation Less Likely
High CVE-2024-30097 Microsoft Windows Speech Remote Code Execution 8.8 0.0173 Exploitation Less Likely
High CVE-2024-30093 Windows Storage Elevation of Privilege 7.3 0.0115 Exploitation Less Likely
High CVE-2024-30095 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.8 0.0101 Exploitation Less Likely
High CVE-2024-30094 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.8 0.0091 Exploitation Less Likely
High CVE-2024-30072 Windows Event Logging Service Remote Code Execution 7.8 0.0086 Exploitation Less Likely
High CVE-2024-30064 Windows Kernel Elevation of Privilege 8.8 0.0079 Exploitation Less Likely
High CVE-2024-30068 Windows Kernel Elevation of Privilege 8.8 0.0078 Exploitation Less Likely
Routine CVE-2024-30076 Windows Container Manager Service Elevation of Privilege 6.8 0.0171 Exploitation Less Likely
Routine CVE-2024-30063 Windows Distributed File System (DFS) Remote Code Execution 6.7 0.0102 Exploitation Less Likely
Showing 1 to 25 of 30 1Next