Skip to the content
The Update Bureau
Security

KB5037782: all 50 vulnerabilities

Cumulative update for Windows Server, version 2022, May 2024. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

50 vulnerabilities fixed
2 exploited 49 important 1 moderate
VulnerabilitySeverityCVSS
CVE-2024-30040 Exploited
Windows MSHTML Platform Security Feature Bypass Vulnerability
 Important 8.8
CVE-2024-30051 Exploited
Windows DWM Core Library Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30006
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-30009
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-30010
Windows Hyper-V Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-30017
Windows Hyper-V Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-30020
Windows Cryptographic Services Remote Code Execution Vulnerability
 Important 8.1
CVE-2024-26211
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-29994
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-29996
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30018
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30025
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30027
NTFS Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30028
Win32k Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30031
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30032
Windows DWM Core Library Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30035
Windows DWM Core Library Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30038
Win32k Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30049
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30014
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 7.5
CVE-2024-30015
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 7.5
CVE-2024-30022
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 7.5
CVE-2024-30023
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 7.5
CVE-2024-30024
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 7.5
CVE-2024-30029
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 7.5
CVE-2024-30033
Windows Search Service Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-29997
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-29998
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-29999
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-30000
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-30001
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-30002
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-30003
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-30004
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-30005
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-30012
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-30021
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
 Important 6.8
CVE-2024-30011
Windows Hyper-V Denial of Service Vulnerability
 Important 6.5
CVE-2024-30019
DHCP Server Service Denial of Service Vulnerability
 Important 6.5
CVE-2024-30036
Windows Deployment Services Information Disclosure Vulnerability
 Important 6.5
CVE-2024-26207
Windows Remote Access Connection Manager Information Disclosure Vulnerability
 Important 5.5
CVE-2024-26217
Windows Remote Access Connection Manager Information Disclosure Vulnerability
 Important 5.5
CVE-2024-28900
Windows Remote Access Connection Manager Information Disclosure Vulnerability
 Important 5.5
CVE-2024-28902
Windows Remote Access Connection Manager Information Disclosure Vulnerability
 Important 5.5
CVE-2024-30008
Windows DWM Core Library Information Disclosure Vulnerability
 Important 5.5
CVE-2024-30016
Windows Cryptographic Services Information Disclosure Vulnerability
 Important 5.5
CVE-2024-30034
Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
 Important 5.5
CVE-2024-30037
Windows Common Log File System Driver Elevation of Privilege Vulnerability
 Important 5.5
CVE-2024-30039
Windows Remote Access Connection Manager Information Disclosure Vulnerability
 Important 5.5
CVE-2024-30050
Windows Mark of the Web Security Feature Bypass Vulnerability
 Moderate 5.4