Microsoft · Security update · September 12, 2023

KB5030213: September 2023 cumulative update for Windows 10 1607

KB5030213, released September 12, 2023, fixes 21 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

3 rated Critical

Exploited

None reported

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.2402

97th percentile

Priority of the 21 CVEs

Patch now 0
                                Urgent 10
                                High 8
                                Routine 3

Applies to

Product	Build after install
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems	14393.6252
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems	14393.6252
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016	14393.6252
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation)	14393.6252
Windows 10 Version 1607 for 32-bit Systems	14393.6252
Windows 10 Version 1607 for x64-based Systems	14393.6252
Windows Server 2016	14393.6252
Windows Server 2016 (Server Core installation)	14393.6252

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Urgent	CVE-2023-38152	Windows DHCP Server	Information Disclosure	5.3	0.2402	More likely
Urgent	CVE-2023-38142	Windows Kernel	Elevation of Privilege	7.8	0.0555	More likely
Urgent	CVE-2023-38144	Windows Common Log File System Driver	Elevation of Privilege	7.8	0.0345	More likely
Urgent	CVE-2023-38143	Windows Common Log File System Driver	Elevation of Privilege	7.8	0.0341	More likely
Urgent	CVE-2023-36792	.NET and Visual Studio	Remote Code Execution	7.8	0.0123	Exploitation Less Likely
Urgent	CVE-2023-36793	.NET and Visual Studio	Remote Code Execution	7.8	0.0123	Exploitation Less Likely
Urgent	CVE-2023-36796	.NET and Visual Studio	Remote Code Execution	7.8	0.0123	Exploitation Less Likely
Urgent	CVE-2023-38160	Windows TCP/IP	Information Disclosure	5.5	0.0094	More likely
Urgent	CVE-2023-36804	Windows GDI	Elevation of Privilege	7.8	0.0060	More likely
Urgent	CVE-2023-38161	Windows GDI	Elevation of Privilege	7.8	0.0059	More likely
High	CVE-2023-38162	Windows DHCP Server	Denial of Service	7.5	0.1069	Exploitation Less Likely
High	CVE-2023-38149	Windows TCP/IP	Denial of Service	7.5	0.0448	Exploitation Less Likely
High	CVE-2023-36805	Windows Scripting	Security Feature Bypass	7.0	0.0176	Exploitation Less Likely
High	CVE-2023-36794	.NET and Visual Studio	Remote Code Execution	7.8	0.0123	N/A
High	CVE-2023-36788	.NET Framework	Remote Code Execution	7.8	0.0102	Exploitation Less Likely
High	CVE-2023-38139	Windows Kernel	Elevation of Privilege	7.8	0.0093	Exploitation Less Likely
High	CVE-2023-38147	Microsoft Windows Codecs Library	Remote Code Execution	8.8	0.0089	Exploitation Less Likely
High	CVE-2023-38141	Windows Kernel	Elevation of Privilege	7.8	0.0063	Exploitation Less Likely
Routine	CVE-2023-36801	Windows DHCP Server	Information Disclosure	5.3	0.0165	Exploitation Less Likely
Routine	CVE-2023-38140	Windows Kernel	Information Disclosure	5.5	0.0106	Exploitation Less Likely
Routine	CVE-2023-36803	Windows Kernel	Information Disclosure	5.5	0.0099	Exploitation Less Likely

Released the same day

KB5002100
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5002457
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5002470
Microsoft Office Online Server
KB5002472
Microsoft SharePoint Server 2019
KB5002474
Microsoft SharePoint Server Subscription Edition
KB5002477
Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1 (32-bit editions), Microsoft Office 2013 Service Pack 1 (64-bit editions)
KB5002483
Microsoft Word 2013 RT Service Pack 1, Microsoft Word 2013 Service Pack 1 (32-bit editions), Microsoft Word 2013 Service Pack 1 (64-bit editions)
KB5002488
Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2013 Service Pack 1 (32-bit editions), Microsoft Excel 2013 Service Pack 1 (64-bit editions)
KB5002494
Microsoft SharePoint Enterprise Server 2016
KB5002496
Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)
KB5002497
Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)
KB5002498
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)

Vendor advisory

https://support.microsoft.com/help/5030213

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/microsoft/kb5030213">KB5030213 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.