Microsoft update

KB5005031

Security Update

View on Microsoft →

Fixed in

Windows 10 Version 1909 for 32-bit Systems 10.0.18363.1734
Windows 10 Version 1909 for ARM64-based Systems 10.0.18363.1734
Windows 10 Version 1909 for x64-based Systems 10.0.18363.1734

Fixes 24 records

TI-2021-15025 CVE-2021-36948 · GHSA-fcr2-qx8m-pfhp

Windows Update Medic Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Update Medic Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.2327 Published 2021-08-12 Fixed in 10.0.17763.2114, 10.0.18363.1734 +3

TI-2021-15014 CVE-2021-36934 · GHSA-x4m2-px5g-5q55

Windows Elevation of Privilege Vulnerability

CRITICAL 93KEV

An elevation of privilege vulnerability exists because of overly permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.67252 Published 2021-07-22 Fixed in 10.0.17763.2114, 10.0.18363.1734 +3

TI-2021-13514 CVE-2021-34486 · GHSA-793m-wq3j-whvr

Windows Event Tracing Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Event Tracing Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.09328 Published 2021-08-12 Fixed in 10.0.17763.2114, 10.0.18363.1734 +3 CWE-416

TI-2021-13512 CVE-2021-34484 · GHSA-mp6h-cxp8-82j6

Windows User Profile Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows User Profile Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.21827 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +9

TI-2021-08241 CVE-2021-26424 · GHSA-f425-rchp-ffpg

Windows TCP/IP Remote Code Execution Vulnerability

HIGH 77

Windows TCP/IP Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.61133 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +9

TI-2021-13510 CVE-2021-34481 · GHSA-6m3c-jc2v-9h92

Windows Print Spooler Remote Code Execution Vulnerability

HIGH 72

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.47717 Published 2021-07-16 Fixed in 10.0.10240.19022, 10.0.14393.4583 +9 CWE-269

TI-2021-13509 CVE-2021-34480 · GHSA-5973-jvgx-r7xh

Scripting Engine Memory Corruption Vulnerability

HIGH 65

Scripting Engine Memory Corruption Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.34185 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +8 CWE-787

TI-2021-08249 CVE-2021-26432 · GHSA-7367-6rvj-7jxm

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

MEDIUM 55

Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11434 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +7

TI-2021-15015 CVE-2021-36936 · GHSA-8xmh-9r43-r5g8

Windows Print Spooler Remote Code Execution Vulnerability

MEDIUM 53

Windows Print Spooler Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07481 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +9

TI-2021-15024 CVE-2021-36947 · GHSA-7954-w5x3-x4x7

Windows Print Spooler Remote Code Execution Vulnerability

MEDIUM 48

Windows Print Spooler Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.07557 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +9

TI-2021-13553 CVE-2021-34530 · GHSA-943g-4p6r-j7gq

Windows Graphics Component Remote Code Execution Vulnerability

MEDIUM 41

Windows Graphics Component Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02441 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +5

TI-2021-15013 CVE-2021-36933 · GHSA-95xg-v9pq-wxv6

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

LOW 39

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03503 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +7

TI-2021-15012 CVE-2021-36932 · GHSA-5qp8-2ph4-rx2p

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

LOW 39

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03503 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +7

TI-2021-15006 CVE-2021-36926 · GHSA-786h-5jgr-vx5p

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

LOW 39

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03503 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +7

TI-2021-13556 CVE-2021-34534 · GHSA-q37m-22jj-3f7x

Windows MSHTML Platform Remote Code Execution Vulnerability

LOW 39

Windows MSHTML Platform Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.02243 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +5

TI-2021-13555 CVE-2021-34533 · GHSA-ch36-6p5f-9jg4

Windows Graphics Component Font Parsing Remote Code Execution Vulnerability

LOW 39

Windows Graphics Component Font Parsing Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02441 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +9

TI-2021-08250 CVE-2021-26433 · GHSA-wg77-43f4-m52v

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

LOW 39

Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03569 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +7

TI-2021-15016 CVE-2021-36937 · GHSA-m743-3wjh-838g

Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability

LOW 38

Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02301 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +9

TI-2021-13558 CVE-2021-34536 · GHSA-7f2q-7qg5-m23p

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

LOW 37

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00643 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +5 CWE-190

TI-2021-13515 CVE-2021-34487 · GHSA-62pw-5259-vhh9

Windows Event Tracing Elevation of Privilege Vulnerability

LOW 37

Windows Event Tracing Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00608 Published 2021-08-12 Fixed in 10.0.14393.4583, 10.0.17763.2114 +4 CWE-269

TI-2021-08243 CVE-2021-26426 · GHSA-x3rj-r3p4-hq68

Windows User Account Profile Picture Elevation of Privilege Vulnerability

LOW 37

Windows User Account Profile Picture Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00706 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +7 CWE-59

TI-2021-13511 CVE-2021-34483 · GHSA-6377-6q3h-9ghh

Windows Print Spooler Elevation of Privilege Vulnerability

LOW 36

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01089 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +9 CWE-269

TI-2021-08242 CVE-2021-26425 · GHSA-467h-6pw9-97gq

Windows Event Tracing Elevation of Privilege Vulnerability

LOW 36

Windows Event Tracing Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00904 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +9 CWE-59

TI-2021-13559 CVE-2021-34537 · GHSA-5422-3fvq-jx63

Windows Bluetooth Driver Elevation of Privilege Vulnerability

LOW 35

Windows Bluetooth Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00498 Published 2021-08-12 Fixed in 10.0.10240.19022, 10.0.14393.4583 +7 CWE-269