Microsoft · ServicingStack update · September 12, 2023

KB5030219: September 2023 cumulative update for Windows 11 22H2

KB5030219, released September 12, 2023, fixes 17 CVEs across 2 products. One of them is being exploited (CVE-2023-36802); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product

CVEs closed

1 rated Critical

Exploited

CVE-2023-36802

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.3738

98th percentile

Priority of the 17 CVEs

Patch now 1
                                Urgent 7
                                High 8
                                Routine 1

Applies to

Product	Build after install
Windows 11 Version 22H2 for ARM64-based Systems	22621.2283
Windows 11 Version 22H2 for x64-based Systems	22621.2283

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2023-36802	Microsoft Streaming Service	Elevation of Privilege	7.8	0.2791	KEVExploited
Urgent	CVE-2023-38148	Windows Internet Connection Sharing (ICS)	Remote Code Execution	8.8	0.0770	More likely
Urgent	CVE-2023-38142	Windows Kernel	Elevation of Privilege	7.8	0.0555	More likely
Urgent	CVE-2023-38144	Windows Common Log File System Driver	Elevation of Privilege	7.8	0.0345	More likely
Urgent	CVE-2023-38143	Windows Common Log File System Driver	Elevation of Privilege	7.8	0.0341	More likely
Urgent	CVE-2023-38160	Windows TCP/IP	Information Disclosure	5.5	0.0094	More likely
Urgent	CVE-2023-36804	Windows GDI	Elevation of Privilege	7.8	0.0060	More likely
Urgent	CVE-2023-38161	Windows GDI	Elevation of Privilege	7.8	0.0059	More likely
High	CVE-2023-38146	Windows Themes	Remote Code Execution	8.8	0.3738	Exploitation Less Likely
High	CVE-2023-38149	Windows TCP/IP	Denial of Service	7.5	0.0448	Exploitation Less Likely
High	CVE-2023-36805	Windows Scripting	Security Feature Bypass	7.0	0.0176	Exploitation Less Likely
High	CVE-2023-38139	Windows Kernel	Elevation of Privilege	7.8	0.0093	Exploitation Less Likely
High	CVE-2023-38147	Microsoft Windows Codecs Library	Remote Code Execution	8.8	0.0089	Exploitation Less Likely
High	CVE-2023-38141	Windows Kernel	Elevation of Privilege	7.8	0.0063	Exploitation Less Likely
High	CVE-2023-35355	Windows Cloud Files Mini Filter Driver	Elevation of Privilege	7.8	0.0059	Exploitation Less Likely
High	CVE-2023-38150	Windows Kernel	Elevation of Privilege	7.8	0.0056	Exploitation Less Likely
Routine	CVE-2023-36803	Windows Kernel	Information Disclosure	5.5	0.0099	Exploitation Less Likely

Released the same day

KB5002100
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5002457
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5002470
Microsoft Office Online Server
KB5002472
Microsoft SharePoint Server 2019
KB5002474
Microsoft SharePoint Server Subscription Edition
KB5002477
Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1 (32-bit editions), Microsoft Office 2013 Service Pack 1 (64-bit editions)
KB5002483
Microsoft Word 2013 RT Service Pack 1, Microsoft Word 2013 Service Pack 1 (32-bit editions), Microsoft Word 2013 Service Pack 1 (64-bit editions)
KB5002488
Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2013 Service Pack 1 (32-bit editions), Microsoft Excel 2013 Service Pack 1 (64-bit editions)
KB5002494
Microsoft SharePoint Enterprise Server 2016
KB5002496
Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)
KB5002497
Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)
KB5002498
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)

Vendor advisory

https://support.microsoft.com/help/5030219

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/microsoft/kb5030219">KB5030219 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.