Microsoft · Security update · July 13, 2021

KB5004249: July 2021 cumulative update for Windows 10 1507

KB5004249, released July 13, 2021, fixes 42 CVEs across 2 products. 3 of them are being exploited (CVE-2021-34448); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now3 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
42
4 rated Critical
Exploited
3
CVE-2021-34448
Exploitation more likely
0
Microsoft's assessment
Highest EPSS
0.4006
98th percentile

Priority of the 42 CVEs

Patch now 3 Urgent 3 High 23 Routine 13

Applies to

ProductBuild after install
Windows 10 for 32-bit Systems10240.19003
Windows 10 for x64-based Systems10240.19003

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2021-34448 Microsoft Scripting EngineRemote Code Execution6.8 0.4006 KEVExploited
Patch now CVE-2021-33771 Windows KernelElevation of Privilege7.8 0.1017 KEVExploited
Patch now CVE-2021-31979 Windows KernelElevation of Privilege7.8 0.0454 KEVExploited
Urgent CVE-2021-33740 Microsoft Windows Codecs LibraryRemote Code Execution7.8 0.0276 Exploitation Less Likely
Urgent CVE-2021-34439 Microsoft Windows Media FoundationRemote Code Execution7.8 0.0267 Exploitation Less Likely
Urgent CVE-2021-34497 Windows MSHTML PlatformRemote Code Execution6.8 0.0215 Exploitation Less Likely
High CVE-2021-31183 Windows TCP/IPDenial of Service7.5 0.0384 Exploitation Less Likely
High CVE-2021-34504 Windows Address BookRemote Code Execution7.8 0.0347 Exploitation Less Likely
High CVE-2021-33788 Windows Local Security Authority Subsystem Service (LSASS)Denial of Service7.5 0.0328 Exploitation Less Likely
High CVE-2021-34476 Common Internet File SystemDenial of Service7.5 0.0328 Exploitation Less Likely
High CVE-2021-34492 Windows PFX EncryptionSpoofing8.1 0.0247 DisclosedExploitation Less Likely
High CVE-2021-33749 Role: DNS ServerRemote Code Execution8.8 0.0242 Exploitation Less Likely
High CVE-2021-33750 Role: DNS ServerRemote Code Execution8.8 0.0242 Exploitation Less Likely
High CVE-2021-33752 Role: DNS ServerRemote Code Execution8.8 0.0242 Exploitation Less Likely
High CVE-2021-33756 Role: DNS ServerRemote Code Execution8.8 0.0241 Exploitation Less Likely
High CVE-2021-34441 Microsoft Windows Media FoundationRemote Code Execution7.8 0.0222 Exploitation Less Likely
High CVE-2021-34446 Windows HTML PlatformSecurity Feature Bypass8.0 0.0205 Exploitation Less Likely
High CVE-2021-34516 Windows Win32KElevation of Privilege7.8 0.0130 Exploitation Less Likely
High CVE-2021-34498 Microsoft Graphics ComponentElevation of Privilege7.8 0.0106 Exploitation Less Likely
High CVE-2021-34512 Windows Storage Spaces ControllerElevation of Privilege7.8 0.0106 Exploitation Less Likely
High CVE-2021-34462 Windows AppX Deployment ExtensionsElevation of Privilege7.0 0.0085 Exploitation Less Likely
High CVE-2021-34514 Windows KernelElevation of Privilege7.8 0.0070 Exploitation Less Likely
High CVE-2021-33773 Windows Remote Access Connection ManagerElevation of Privilege7.8 0.0064 Exploitation Less Likely
High CVE-2021-33761 Windows Remote Access Connection ManagerElevation of Privilege7.8 0.0061 Exploitation Less Likely
High CVE-2021-34511 Windows InstallerElevation of Privilege7.8 0.0057 Exploitation Less Likely
Showing 1 to 25 of 42 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.