Microsoft · ServicingStack update · June 11, 2024

KB5039330: June 2024 cumulative update for Windows Server 2022

KB5039330, released June 11, 2024, fixes 31 CVEs across 2 products. 3 of them are being exploited (CVE-2024-30088); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
31
1 rated Critical
Exploited
3
CVE-2024-30088
Exploitation more likely
9
Vendor assessment
Highest EPSS
0.7430
99th percentile

Priority of the 31 CVEs

Patch now 3 Urgent 9 High 12 Routine 7

Applies to

ProductBuild after install
Windows Server 202220348.2522
Windows Server 2022 (Server Core installation)20348.2522

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-30088 Windows NT OS Kernel Elevation of Privilege 7.0 0.6820 KEVRansomwareExploited
Patch now CVE-2024-35250 Windows Kernel-Mode Drivers Elevation of Privilege 7.8 0.2522 KEVExploited
Patch now CVE-2024-38213 Windows Mark of the Web (MOTW) Security Feature Bypass 6.5 0.1363 KEVExploited
Urgent CVE-2024-30080 Windows Server Service Remote Code Execution 9.8 0.4287 More likely
Urgent CVE-2024-30085 Windows Cloud Files Mini Filter Driver Elevation of Privilege 7.8 0.1432 More likely
Urgent CVE-2024-30087 Windows Win32K - GRFX Elevation of Privilege 7.8 0.0951 More likely
Urgent CVE-2024-30089 Microsoft Streaming Service Elevation of Privilege 7.8 0.0810 More likely
Urgent CVE-2024-30084 Windows Kernel-Mode Drivers Elevation of Privilege 7.0 0.0591 More likely
Urgent CVE-2024-30091 Windows Win32K - GRFX Elevation of Privilege 7.8 0.0426 More likely
Urgent CVE-2024-30082 Windows Win32K - GRFX Elevation of Privilege 7.8 0.0127 More likely
Urgent CVE-2024-30086 Windows Win32 Kernel Subsystem Elevation of Privilege 7.8 0.0112 More likely
Urgent CVE-2024-30099 Windows NT OS Kernel Elevation of Privilege 7.0 0.0054 More likely
High CVE-2023-50868 Microsoft Windows Denial of Service 7.5 0.7430 DisclosedExploitation Less Likely
High CVE-2024-30078 Windows Wi-Fi Driver Remote Code Execution 8.8 0.0520 Exploitation Less Likely
High CVE-2024-30083 Windows Standards-Based Storage Management Service Denial of Service 7.5 0.0253 Exploitation Less Likely
High CVE-2024-30090 Microsoft Streaming Service Elevation of Privilege 7.0 0.0198 Exploitation Less Likely
High CVE-2024-30077 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.0 0.0180 Exploitation Less Likely
High CVE-2024-30097 Microsoft Windows Speech Remote Code Execution 8.8 0.0173 Exploitation Less Likely
High CVE-2024-30093 Windows Storage Elevation of Privilege 7.3 0.0115 Exploitation Less Likely
High CVE-2024-30095 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.8 0.0101 Exploitation Less Likely
High CVE-2024-30062 Windows Server Service Remote Code Execution 7.8 0.0101 Exploitation Less Likely
High CVE-2024-30094 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 7.8 0.0091 Exploitation Less Likely
High CVE-2024-30064 Windows Kernel Elevation of Privilege 8.8 0.0079 Exploitation Less Likely
High CVE-2024-30068 Windows Kernel Elevation of Privilege 8.8 0.0078 Exploitation Less Likely
Routine CVE-2024-30076 Windows Container Manager Service Elevation of Privilege 6.8 0.0171 Exploitation Less Likely
Showing 1 to 25 of 31 1Next