Skip to the content
The Update Bureau
Security

KB5037771: all 45 vulnerabilities

Cumulative update for Windows 11, version 23H2, May 2024. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

45 vulnerabilities fixed
2 exploited 44 important 1 moderate
VulnerabilitySeverityCVSS
CVE-2024-30040 Exploited
Windows MSHTML Platform Security Feature Bypass Vulnerability
 Important 8.8
CVE-2024-30051 Exploited
Windows DWM Core Library Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30006
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-30009
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-30017
Windows Hyper-V Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-30020
Windows Cryptographic Services Remote Code Execution Vulnerability
 Important 8.1
CVE-2024-26211
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-29994
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-29996
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30018
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30025
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30027
NTFS Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30028
Win32k Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30031
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30032
Windows DWM Core Library Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30035
Windows DWM Core Library Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30038
Win32k Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30049
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30014
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 7.5
CVE-2024-30015
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 7.5
CVE-2024-30022
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 7.5
CVE-2024-30023
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 7.5
CVE-2024-30024
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 7.5
CVE-2024-30029
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 7.5
CVE-2024-29997
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-29998
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-29999
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-30000
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-30001
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-30002
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-30003
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-30004
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-30005
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-30012
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-30021
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-26207
Windows Remote Access Connection Manager Information Disclosure Vulnerability
 Important 5.5
CVE-2024-26217
Windows Remote Access Connection Manager Information Disclosure Vulnerability
 Important 5.5
CVE-2024-28900
Windows Remote Access Connection Manager Information Disclosure Vulnerability
 Important 5.5
CVE-2024-28902
Windows Remote Access Connection Manager Information Disclosure Vulnerability
 Important 5.5
CVE-2024-30008
Windows DWM Core Library Information Disclosure Vulnerability
 Important 5.5
CVE-2024-30016
Windows Cryptographic Services Information Disclosure Vulnerability
 Important 5.5
CVE-2024-30034
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
 Important 5.5
CVE-2024-30037
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 5.5
CVE-2024-30039
Windows Remote Access Connection Manager Information Disclosure Vulnerability
 Important 5.5
CVE-2024-30050
Windows Mark of the Web Security Feature Bypass Vulnerability
 Moderate 5.4