Microsoft · Security update · July 13, 2021

KB5004302: July 2021 security update

KB5004302, released July 13, 2021, fixes 39 CVEs across 2 products. One of them is being exploited (CVE-2021-31979); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV1 publicly disclosed

CVEs closed

1 rated Critical

Exploited

CVE-2021-31979

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.1379

96th percentile

Priority of the 39 CVEs

Patch now 1
                                Urgent 2
                                High 23
                                Routine 13

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2021-31979	Windows Kernel	Elevation of Privilege	7.8	0.0454	KEVExploited
Urgent	CVE-2021-34494	Role: DNS Server	Remote Code Execution	8.8	0.0405	Exploitation Less Likely
Urgent	CVE-2021-33780	Role: DNS Server	Remote Code Execution	8.8	0.0271	More likely
High	CVE-2020-17049	Microsoft Windows	Security Feature Bypass	7.2	0.1379	Exploitation Less Likely
High	CVE-2021-31183	Windows TCP/IP	Denial of Service	7.5	0.0384	Exploitation Less Likely
High	CVE-2021-34504	Windows Address Book	Remote Code Execution	7.8	0.0347	Exploitation Less Likely
High	CVE-2021-33788	Windows Local Security Authority Subsystem Service (LSASS)	Denial of Service	7.5	0.0328	Exploitation Less Likely
High	CVE-2021-34476	Common Internet File System	Denial of Service	7.5	0.0328	Exploitation Less Likely
High	CVE-2021-34442	Role: DNS Server	Remote Code Execution	8.8	0.0317	Exploitation Less Likely
High	CVE-2021-34492	Windows PFX Encryption	Spoofing	8.1	0.0247	DisclosedExploitation Less Likely
High	CVE-2021-33749	Role: DNS Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2021-33750	Role: DNS Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2021-33752	Role: DNS Server	Remote Code Execution	8.8	0.0242	Exploitation Less Likely
High	CVE-2021-33756	Role: DNS Server	Remote Code Execution	8.8	0.0241	Exploitation Less Likely
High	CVE-2021-34441	Microsoft Windows Media Foundation	Remote Code Execution	7.8	0.0222	Exploitation Less Likely
High	CVE-2021-33786	Windows Local Security Authority Subsystem Service (LSASS)	Security Feature Bypass	8.1	0.0212	Exploitation Less Likely
High	CVE-2021-33746	Microsoft Windows DNS	Remote Code Execution	8.0	0.0200	Exploitation Less Likely
High	CVE-2021-33754	Microsoft Windows DNS	Remote Code Execution	8.0	0.0198	Exploitation Less Likely
High	CVE-2021-34516	Windows Win32K	Elevation of Privilege	7.8	0.0130	Exploitation Less Likely
High	CVE-2021-34498	Microsoft Graphics Component	Elevation of Privilege	7.8	0.0106	Exploitation Less Likely
High	CVE-2021-34514	Windows Kernel	Elevation of Privilege	7.8	0.0070	Exploitation Less Likely
High	CVE-2021-34511	Windows Installer	Elevation of Privilege	7.8	0.0057	Exploitation Less Likely
High	CVE-2021-34460	Windows Storage Spaces Controller	Elevation of Privilege	7.8	0.0056	Exploitation Less Likely
High	CVE-2021-34456	Windows Remote Access Connection Manager	Elevation of Privilege	7.8	0.0056	Exploitation Less Likely
High	CVE-2021-34455	Windows File History Service	Elevation of Privilege	7.8	0.0053	Exploitation Less Likely

Released the same day

KB5001949
Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)
KB5001973
Microsoft Office Online Server
KB5001975
Microsoft SharePoint Server 2019
KB5001976
Microsoft SharePoint Enterprise Server 2016
KB5001977
Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)
KB5001979
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5001981
Microsoft SharePoint Enterprise Server 2016
KB5001983
Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1 (32-bit editions), Microsoft Office 2013 Service Pack 1 (64-bit editions)
KB5001984
Microsoft SharePoint Enterprise Server 2013 Service Pack 1
KB5001986
Microsoft Office Web Apps Server 2013 Service Pack 1
KB5001992
Microsoft SharePoint Foundation 2013 Service Pack 1
KB5001993
Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2013 Service Pack 1 (32-bit editions), Microsoft Excel 2013 Service Pack 1 (64-bit editions)

Vendor advisory

https://support.microsoft.com/help/5004302

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/microsoft/kb5004302">KB5004302 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.