Microsoft · Security update · June 11, 2024

KB5039260: June 2024 security update

KB5039260, released June 11, 2024, fixes 20 CVEs across 2 products. 2 of them are being exploited (CVE-2024-35250); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEV1 publicly disclosed
CVEs closed
20
1 rated Critical
Exploited
2
CVE-2024-35250
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.7430
99th percentile

Priority of the 20 CVEs

Patch now 2 Urgent 6 High 8 Routine 4

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-35250 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.2522 KEVExploited
Patch now CVE-2024-38213 Windows Mark of the Web (MOTW) Security Feature Bypass 6.5 0.1363 KEVExploited
Urgent CVE-2024-30080 Windows Server Service Remote Code Execution 9.8 0.4287 More likely
Urgent CVE-2024-30087 Windows Win32K - GRFX Elevation of Privilege 7.8 0.0951 More likely
Urgent CVE-2024-30084 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0591 More likely
Urgent CVE-2024-30091 Windows Win32K - GRFX Elevation of Privilege 7.8 0.0426 More likely
Urgent CVE-2024-30082 Windows Win32K - GRFX Elevation of Privilege 7.8 0.0127 More likely
Urgent CVE-2024-30086 Windows Win32 Kernel Subsystem Elevation of Privilege 7.8 0.0112 More likely
High CVE-2023-50868 Microsoft Windows Denial of Service 7.5 0.7430 DisclosedExploitation Less Likely
High CVE-2024-30078 Windows Wi-Fi Driver Remote Code Execution 8.8 0.0520 Exploitation Less Likely
High CVE-2024-30070 Windows DHCP Server Denial of Service 7.5 0.0231 Exploitation Less Likely
High CVE-2024-30090 Microsoft Streaming Service Elevation of Privilege 7.0 0.0198 Exploitation Less Likely
High CVE-2024-30077 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.0 0.0180 Exploitation Less Likely
High CVE-2024-30093 Windows Storage Elevation of Privilege 7.3 0.0115 Exploitation Less Likely
High CVE-2024-30095 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.8 0.0101 Exploitation Less Likely
High CVE-2024-30094 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.8 0.0091 Exploitation Less Likely
Routine CVE-2024-30063 Windows Distributed File System (DFS) Remote Code Execution 6.7 0.0102 Exploitation Less Likely
Routine CVE-2024-30065 Windows Themes Denial of Service 5.5 0.0084 Exploitation Less Likely
Routine CVE-2024-30066 Winlogon Elevation of Privilege 5.5 0.0063 Exploitation Less Likely
Routine CVE-2024-30067 Winlogon Elevation of Privilege 5.5 0.0063 Exploitation Less Likely
Showing 1 to 20 of 20 1