Microsoft · Security update · July 13, 2021

KB5004244: July 2021 cumulative update for Windows 10 1809

KB5004244, released July 13, 2021, fixes 78 CVEs across 5 products. 3 of them are being exploited (CVE-2021-34448); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEV3 publicly disclosed
CVEs closed
78
7 rated Critical
Exploited
3
CVE-2021-34448
Exploitation more likely
2
Microsoft's assessment
Highest EPSS
0.4006
98th percentile

Priority of the 78 CVEs

Patch now 3 Urgent 8 High 44 Routine 23

Applies to

ProductBuild after install
Windows 10 Version 1809 for 32-bit Systems17763.2061
Windows 10 Version 1809 for ARM64-based Systems17763.2061
Windows 10 Version 1809 for x64-based Systems17763.2061
Windows Server 201917763.2061
Windows Server 2019 (Server Core installation)17763.2061

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2021-34448 Microsoft Scripting EngineRemote Code Execution6.8 0.4006 KEVExploited
Patch now CVE-2021-33771 Windows KernelElevation of Privilege7.8 0.1017 KEVExploited
Patch now CVE-2021-31979 Windows KernelElevation of Privilege7.8 0.0454 KEVExploited
Urgent CVE-2021-34494 Role: DNS ServerRemote Code Execution8.8 0.0405 Exploitation Less Likely
Urgent CVE-2021-33740 Microsoft Windows Codecs LibraryRemote Code Execution7.8 0.0276 Exploitation Less Likely
Urgent CVE-2021-34449 Windows Win32KElevation of Privilege7.0 0.0271 More likely
Urgent CVE-2021-33780 Role: DNS ServerRemote Code Execution8.8 0.0271 More likely
Urgent CVE-2021-34458 Windows KernelRemote Code Execution9.9 0.0263 Exploitation Less Likely
Urgent CVE-2021-34450 Role: Windows Hyper-VRemote Code Execution8.5 0.0250 Exploitation Less Likely
Urgent CVE-2021-34503 Microsoft Windows Media FoundationRemote Code Execution7.8 0.0231 Exploitation Less Likely
Urgent CVE-2021-34497 Windows MSHTML PlatformRemote Code Execution6.8 0.0215 Exploitation Less Likely
High CVE-2020-17049 Microsoft WindowsSecurity Feature Bypass7.2 0.1379 Exploitation Less Likely
High CVE-2021-31183 Windows TCP/IPDenial of Service7.5 0.0384 Exploitation Less Likely
High CVE-2021-34504 Windows Address BookRemote Code Execution7.8 0.0347 Exploitation Less Likely
High CVE-2021-33788 Windows Local Security Authority Subsystem Service (LSASS)Denial of Service7.5 0.0328 Exploitation Less Likely
High CVE-2021-34476 Common Internet File SystemDenial of Service7.5 0.0328 Exploitation Less Likely
High CVE-2021-34490 Windows TCP/IPDenial of Service7.5 0.0328 Exploitation Less Likely
High CVE-2021-33785 Windows AF_UNIX Socket ProviderDenial of Service7.5 0.0325 Exploitation Less Likely
High CVE-2021-34442 Role: DNS ServerRemote Code Execution8.8 0.0317 Exploitation Less Likely
High CVE-2021-34489 Microsoft Graphics ComponentRemote Code Execution7.8 0.0247 Exploitation Less Likely
High CVE-2021-34492 Windows PFX EncryptionSpoofing8.1 0.0247 DisclosedExploitation Less Likely
High CVE-2021-33779 Active Directory Federation ServicesSecurity Feature Bypass8.1 0.0244 DisclosedExploitation Less Likely
High CVE-2021-33749 Role: DNS ServerRemote Code Execution8.8 0.0242 Exploitation Less Likely
High CVE-2021-33750 Role: DNS ServerRemote Code Execution8.8 0.0242 Exploitation Less Likely
High CVE-2021-33752 Role: DNS ServerRemote Code Execution8.8 0.0242 Exploitation Less Likely
Showing 1 to 25 of 78 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.