Skip to the content
The Update Bureau
Security

KB5039227: all 31 vulnerabilities

Cumulative update for Windows Server, version 2022, June 2024. The update page explains it and lists only the exploited, publicly disclosed and critical vulnerabilities; here are all of them, most severe first.

Vulnerabilities fixed

31 vulnerabilities fixed
1 exploited 1 critical 29 important 1 moderate
VulnerabilitySeverityCVSS
CVE-2024-38213 Exploited
Windows Mark of the Web Security Feature Bypass Vulnerability
 Moderate 6.5
CVE-2024-30080
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
 Critical 9.8
CVE-2024-30064
Windows Kernel Elevation of Privilege Vulnerability
 Important 8.8
CVE-2024-30068
Windows Kernel Elevation of Privilege Vulnerability
 Important 8.8
CVE-2024-30078
Windows Wi-Fi Driver Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-30097
Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
 Important 8.8
CVE-2024-30077
Windows OLE Remote Code Execution Vulnerability
 Important 8.0
CVE-2024-30062
Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability
 Important 7.8
CVE-2024-30082
Win32k Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30085
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30086
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30087
Win32k Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30089
Microsoft Streaming Service Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30091
Win32k Elevation of Privilege Vulnerability
 Important 7.8
CVE-2024-30094
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 7.8
CVE-2024-30095
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
 Important 7.8
CVE-2024-35250
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
 Important 7.8
CVE-2023-50868
MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPU
 Important 7.5
CVE-2024-30083
Windows Standards-Based Storage Management Service Denial of Service Vulnerability
 Important 7.5
CVE-2024-30093
Windows Storage Elevation of Privilege Vulnerability
 Important 7.3
CVE-2024-30084
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-30088
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-30090
Microsoft Streaming Service Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-30099
Windows Kernel Elevation of Privilege Vulnerability
 Important 7.0
CVE-2024-30076
Windows Container Manager Service Elevation of Privilege Vulnerability
 Important 6.8
CVE-2024-30063
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
 Important 6.7
CVE-2024-30065
Windows Themes Denial of Service Vulnerability
 Important 5.5
CVE-2024-30066
Winlogon Elevation of Privilege Vulnerability
 Important 5.5
CVE-2024-30067
Winlogon Elevation of Privilege Vulnerability
 Important 5.5
CVE-2024-30096
Windows Cryptographic Services Information Disclosure Vulnerability
 Important 5.5
CVE-2024-30069
Windows Remote Access Connection Manager Information Disclosure Vulnerability
 Important 4.7