Microsoft · Security update · July 9, 2024

KB5040448: July 2024 cumulative update for Windows 10 1507

KB5040448, released July 9, 2024, fixes 61 CVEs across 6 products. 2 of them are being exploited (CVE-2024-38112); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
61
1 rated Critical
Exploited
2
CVE-2024-38112
Exploitation more likely
7
Microsoft's assessment
Highest EPSS
0.8423
99th percentile

Priority of the 61 CVEs

Patch now 2 Urgent 7 High 37 Routine 15

Applies to

ProductBuild after install
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 201610240.20710
Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016 (Server Core installation)10240.20710
Microsoft .NET Framework 4.6/4.6.2 on Windows 10 for 32-bit Systems10240.20710
Microsoft .NET Framework 4.6/4.6.2 on Windows 10 for x64-based Systems10240.20710
Windows 10 for 32-bit Systems10240.20710
Windows 10 for x64-based Systems10240.20710

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-38112 Windows MSHTML PlatformSpoofing7.5 0.8423 KEVExploited
Patch now CVE-2023-24932 Windows Secure BootSecurity Feature Bypass6.7 0.1182 DisclosedExploited
Urgent CVE-2024-38060 Windows Imaging ComponentRemote Code Execution8.8 0.1591 More likely
Urgent CVE-2024-38054 Microsoft Streaming ServiceElevation of Privilege7.8 0.1042 More likely
Urgent CVE-2024-38052 Microsoft Streaming ServiceElevation of Privilege7.8 0.0697 More likely
Urgent CVE-2024-38085 Windows Win32 Kernel SubsystemElevation of Privilege7.8 0.0526 More likely
Urgent CVE-2024-38066 Windows Win32K - GRFXElevation of Privilege7.8 0.0086 More likely
Urgent CVE-2024-38079 Microsoft Graphics ComponentElevation of Privilege7.8 0.0071 More likely
Urgent CVE-2024-39684 Active Directory Rights Management ServicesElevation of Privilege7.8 0.0042 More likely
High CVE-2024-30081 Windows NTLMSpoofing7.1 0.2381 Exploitation Less Likely
High CVE-2024-3596 NPS RADIUS ServerSpoofing9.0 0.1486 Exploitation Less Likely
High CVE-2024-38068 Windows Online Certificate Status Protocol (OCSP)Denial of Service7.5 0.0252 Exploitation Less Likely
High CVE-2024-38064 Windows TCP/IPInformation Disclosure7.5 0.0220 Exploitation Less Likely
High CVE-2024-38025 Windows Performance MonitorRemote Code Execution7.2 0.0207 Exploitation Less Likely
High CVE-2024-38028 Windows Performance MonitorRemote Code Execution7.2 0.0207 Exploitation Less Likely
High CVE-2024-38091 Microsoft WS-DiscoveryDenial of Service7.5 0.0189 Exploitation Less Likely
High CVE-2024-38104 Windows Fax and Scan ServiceRemote Code Execution8.8 0.0182 Exploitation Less Likely
High CVE-2024-38019 Windows Performance MonitorRemote Code Execution7.2 0.0178 Exploitation Less Likely
High CVE-2024-38061 Role: Active Directory Certificate Services; Active Directory Domain ServicesElevation of Privilege7.5 0.0150 Exploitation Less Likely
High CVE-2024-37969 Windows Secure BootSecurity Feature Bypass8.0 0.0136 Exploitation Less Likely
High CVE-2024-37971 Windows Secure BootSecurity Feature Bypass8.0 0.0136 Exploitation Less Likely
High CVE-2024-38081 .NET and Visual StudioElevation of Privilege7.3 0.0130 Exploitation Less Likely
High CVE-2024-37975 Windows Secure BootSecurity Feature Bypass8.0 0.0126 Exploitation Less Likely
High CVE-2024-37987 Windows Secure BootSecurity Feature Bypass8.0 0.0126 Exploitation Less Likely
High CVE-2024-38011 Windows Secure BootSecurity Feature Bypass8.0 0.0126 Exploitation Less Likely
Showing 1 to 25 of 61 1Next

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.