Microsoft · Security update · February 13, 2024

KB5034766: February 2024 cumulative update for Windows 11 21H2

KB5034766, released February 13, 2024, fixes 40 CVEs across 2 products. 3 of them are being exploited (CVE-2024-21412); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now3 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
40
2 rated Critical
Exploited
3
CVE-2024-21412
Exploitation more likely
3
Microsoft's assessment
Highest EPSS
0.9941
99th percentile

Priority of the 40 CVEs

Patch now 3 Urgent 4 High 24 Routine 9

Applies to

ProductBuild after install
Windows 11 version 21H2 for ARM64-based Systems22000.2777
Windows 11 version 21H2 for x64-based Systems22000.2777

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2024-21412 Internet Shortcut FilesSecurity Feature Bypass8.1 0.9941 KEVRansomwareExploited
Patch now CVE-2024-21338 Windows KernelElevation of Privilege7.8 0.6221 KEVRansomwareExploited
Patch now CVE-2024-21351 Windows SmartScreenSecurity Feature Bypass7.6 0.2780 KEVExploited
Urgent CVE-2024-21357 Windows Internet Connection Sharing (ICS)Remote Code Execution8.1 0.2690 More likely
Urgent CVE-2024-21371 Windows KernelElevation of Privilege7.0 0.1088 More likely
Urgent CVE-2024-21346 Windows Win32K - ICOMPElevation of Privilege7.8 0.0412 More likely
Urgent CVE-2024-20684 Windows Hyper-VDenial of Service6.5 0.0103 Exploitation Less Likely
High CVE-2024-21348 Windows Internet Connection Sharing (ICS)Denial of Service7.5 0.0218 Exploitation Less Likely
High CVE-2024-21372 Windows OLERemote Code Execution8.8 0.0181 Exploitation Less Likely
High CVE-2024-21358 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0177 Exploitation Less Likely
High CVE-2024-21360 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0177 Exploitation Less Likely
High CVE-2024-21365 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0177 Exploitation Less Likely
High CVE-2024-21366 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0177 Exploitation Less Likely
High CVE-2024-21370 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0177 Exploitation Less Likely
High CVE-2024-21420 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0173 Exploitation Less Likely
High CVE-2024-21375 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0165 Exploitation Less Likely
High CVE-2024-21349 Microsoft ActiveXRemote Code Execution8.8 0.0164 Exploitation Less Likely
High CVE-2024-21359 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0164 Exploitation Less Likely
High CVE-2024-21361 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0164 Exploitation Less Likely
High CVE-2024-21367 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0164 Exploitation Less Likely
High CVE-2024-21368 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0164 Exploitation Less Likely
High CVE-2024-21352 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0163 Exploitation Less Likely
High CVE-2024-21391 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0163 Exploitation Less Likely
High CVE-2024-21369 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0155 Exploitation Less Likely
High CVE-2024-21350 Microsoft WDAC OLE DB provider for SQLRemote Code Execution8.8 0.0148 Exploitation Less Likely
Showing 1 to 25 of 40 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.