Microsoft update

KB5009586

Monthly Rollup

View on Microsoft →

Fixed in

Windows Server 2012 6.2.9200.23584
Windows Server 2012 (Server Core installation) 6.2.9200.23584

Fixes 48 records

TI-2022-06284 CVE-2022-21919 · GHSA-wmfg-rc3x-58v3

Windows User Profile Service Elevation of Privilege Vulnerability

CRITICAL 90KEV

Windows User Profile Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.02567 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10 CWE-59

TI-2022-06260 CVE-2022-21894 · GHSA-q5c9-xwjv-3hcq

Secure Boot Security Feature Bypass Vulnerability

HIGH 80

Secure Boot Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.09116 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +9 CWE-863

TI-2022-06206 CVE-2022-21836 · GHSA-f2f4-79fq-q8j8

Windows Certificate Spoofing Vulnerability

HIGH 69

Windows Certificate Spoofing Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00721 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11 CWE-295

TI-2022-06247 CVE-2022-21880 · GHSA-c54c-rr4h-4r46

Windows GDI+ Information Disclosure Vulnerability

MEDIUM 48

Windows GDI+ Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04103 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11

TI-2022-06270 CVE-2022-21904 · GHSA-9f3w-8vw8-xr57

Windows GDI Information Disclosure Vulnerability

MEDIUM 47

Windows GDI Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03729 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06259 CVE-2022-21893 · GHSA-m75r-79xc-jw3w

Remote Desktop Protocol Remote Code Execution Vulnerability

MEDIUM 46

Remote Desktop Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.0863 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06250 CVE-2022-21883 · GHSA-hj2p-9mfx-8r3r

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

MEDIUM 46

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04644 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06218 CVE-2022-21848 · GHSA-623c-gm3v-mxr4

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

MEDIUM 46

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04399 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06287 CVE-2022-21922 · GHSA-v9r4-pcqm-62qq

Remote Procedure Call Runtime Remote Code Execution Vulnerability

MEDIUM 43

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02929 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11

TI-2022-06285 CVE-2022-21920 · GHSA-2942-p8v5-q78c

Windows Kerberos Elevation of Privilege Vulnerability

MEDIUM 43

Windows Kerberos Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02929 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11

TI-2022-06224 CVE-2022-21857 · GHSA-wfqc-43cc-jp29

Active Directory Domain Services Elevation of Privilege Vulnerability

MEDIUM 43

Active Directory Domain Services Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02638 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06221 CVE-2022-21851 · GHSA-qqhf-7fqm-49mx

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 43

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02942 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +12

TI-2022-06220 CVE-2022-21850 · GHSA-hgqg-j5g9-wjqr

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 43

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02942 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +12

TI-2022-06256 CVE-2022-21890 · GHSA-2493-8gg5-974x

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

LOW 39

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03202 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06255 CVE-2022-21889 · GHSA-6w5v-3858-hc7f

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

LOW 39

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03202 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06213 CVE-2022-21843 · GHSA-363v-wf7v-f7x9

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

LOW 39

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03556 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06278 CVE-2022-21913 · GHSA-w3cw-fh5g-ghvr

Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass

LOW 38

Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02841 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11

TI-2022-06263 CVE-2022-21897 · GHSA-v4jr-rm6p-p2mv

Windows Common Log File System Driver Elevation of Privilege Vulnerability

LOW 38

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01085 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11

TI-2022-06261 CVE-2022-21895 · GHSA-m4qv-hj8q-qx52

Windows User Profile Service Elevation of Privilege Vulnerability

LOW 37

Windows User Profile Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01257 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +7 CWE-59

TI-2022-06208 CVE-2022-21838 · GHSA-qgrx-jqwh-wcx9

Windows Cleanup Manager Elevation of Privilege Vulnerability

LOW 37

Windows Cleanup Manager Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01519 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +9 CWE-59

TI-2022-06281 CVE-2022-21916 · GHSA-jwhf-5xx5-882m

Windows Common Log File System Driver Elevation of Privilege Vulnerability

LOW 36

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06280 CVE-2022-21915 · GHSA-c8q8-mv4x-f6xr

Windows GDI+ Information Disclosure Vulnerability

LOW 36

Windows GDI+ Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02918 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06274 CVE-2022-21908 · GHSA-mjx6-6qv7-x73w

Windows Installer Elevation of Privilege Vulnerability

LOW 36

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0093 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11

TI-2022-06271 CVE-2022-21905 · GHSA-wfrx-qqph-r8qv

Windows Hyper-V Security Feature Bypass Vulnerability

LOW 36

Windows Hyper-V Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00748 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06269 CVE-2022-21903 · GHSA-m3w4-3h4x-56x3

Windows GDI Elevation of Privilege Vulnerability

LOW 36

Windows GDI Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00835 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +7

TI-2022-06279 CVE-2022-21914 · GHSA-5hx2-5438-v8qx

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

LOW 35

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00685 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06252 CVE-2022-21885 · GHSA-9hv9-7xwp-mr77

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

LOW 35

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00685 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11

TI-2022-06251 CVE-2022-21884 · GHSA-gfq7-g4rw-qmmx

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

LOW 35

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00685 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.20348.469 +6

TI-2022-06242 CVE-2022-21875 · GHSA-4wg8-3vhc-r47f

Windows Storage Elevation of Privilege Vulnerability

LOW 35

Windows Storage Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00694 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +8

TI-2022-06237 CVE-2022-21870 · GHSA-5jv2-3xhx-7q63

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability

LOW 35

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00694 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +9

TI-2022-06205 CVE-2022-21835 · GHSA-v2r4-rmwh-m7vf

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

LOW 35

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00685 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06204 CVE-2022-21834 · GHSA-w8qh-prf7-9pcv

Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability

LOW 35

Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00653 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06203 CVE-2022-21833 · GHSA-m2qm-93f9-5g8f

Virtual Machine IDE Drive Elevation of Privilege Vulnerability

LOW 35

Virtual Machine IDE Drive Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00653 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06323 CVE-2022-21963 · GHSA-mf8g-7q5v-hc9q

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

LOW 33

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00716 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +9

TI-2022-06258 CVE-2022-21892 · GHSA-jpj4-x5mf-66v4

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

LOW 33

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00758 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +9

TI-2022-06292 CVE-2022-21928 · GHSA-cx4w-hqcr-2343

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

LOW 32

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.4 Physical No auth No interaction EPSS 0.00672 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +8

TI-2022-06234 CVE-2022-21867 · GHSA-q3j3-3c4w-jhjq

Windows Push Notifications Apps Elevation of Privilege Vulnerability

LOW 32

Windows Push Notifications Apps Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0069 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +8

TI-2022-06231 CVE-2022-21864 · GHSA-ppc5-cw97-rw5h

Windows UI Immersive Server API Elevation of Privilege Vulnerability

LOW 32

Windows UI Immersive Server API Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0079 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +9

TI-2022-06229 CVE-2022-21862 · GHSA-pp87-f2wm-8cx4

Windows Application Model Core API Elevation of Privilege Vulnerability

LOW 32

Windows Application Model Core API Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00649 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11

TI-2022-06322 CVE-2022-21962 · GHSA-qr54-v3fq-rf83

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

LOW 31

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00758 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +9

TI-2022-06321 CVE-2022-21961 · GHSA-rmmp-36jf-jcm8

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

LOW 31

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00758 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +9

TI-2022-06320 CVE-2022-21960 · GHSA-j8q3-2728-qg7p

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

LOW 31

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00758 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +9

TI-2022-06319 CVE-2022-21959 · GHSA-2cf2-v5rq-8wx9

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

LOW 31

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00758 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +9

TI-2022-06318 CVE-2022-21958 · GHSA-675m-qpc9-9wr6

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

LOW 31

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00758 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +9

TI-2022-06288 CVE-2022-21924 · GHSA-2pg9-pfqj-rjhg

Workstation Service Remote Protocol Security Feature Bypass Vulnerability

LOW 30

Workstation Service Remote Protocol Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.0307 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11

TI-2022-06265 CVE-2022-21899 · GHSA-67j8-976x-9cmm

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

LOW 28

Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01464 Published 2022-01-11 Fixed in 10.0.10240.19177, 6.1.7601.25829 +2

TI-2022-06243 CVE-2022-21876 · GHSA-p7qh-86jc-j86r

Win32k Information Disclosure Vulnerability

LOW 28

Win32k Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01318 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +8 CWE-125

TI-2022-06266 CVE-2022-21900 · GHSA-r5xm-97qq-84pj

Windows Hyper-V Security Feature Bypass Vulnerability

LOW 22

Windows Hyper-V Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.6 Adjacent network Low privileges No interaction EPSS 0.0068 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10