Microsoft update

KB5009601

Security Only

View on Microsoft →

Fixed in

Windows Server 2008 for 32-bit Systems Service Pack 2 6.0.6003.21349
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 6.0.6003.21349
Windows Server 2008 for x64-based Systems Service Pack 2 6.0.6003.21349
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 6.0.6003.21349

Fixes 25 records

TI-2022-06284 CVE-2022-21919 · GHSA-wmfg-rc3x-58v3

Windows User Profile Service Elevation of Privilege Vulnerability

CRITICAL 90KEV

Windows User Profile Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.02567 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10 CWE-59

TI-2022-06206 CVE-2022-21836 · GHSA-f2f4-79fq-q8j8

Windows Certificate Spoofing Vulnerability

HIGH 69

Windows Certificate Spoofing Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00721 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11 CWE-295

TI-2022-06247 CVE-2022-21880 · GHSA-c54c-rr4h-4r46

Windows GDI+ Information Disclosure Vulnerability

MEDIUM 48

Windows GDI+ Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04103 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11

TI-2022-06270 CVE-2022-21904 · GHSA-9f3w-8vw8-xr57

Windows GDI Information Disclosure Vulnerability

MEDIUM 47

Windows GDI Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03729 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06218 CVE-2022-21848 · GHSA-623c-gm3v-mxr4

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

MEDIUM 46

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04399 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06287 CVE-2022-21922 · GHSA-v9r4-pcqm-62qq

Remote Procedure Call Runtime Remote Code Execution Vulnerability

MEDIUM 43

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02929 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11

TI-2022-06285 CVE-2022-21920 · GHSA-2942-p8v5-q78c

Windows Kerberos Elevation of Privilege Vulnerability

MEDIUM 43

Windows Kerberos Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02929 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11

TI-2022-06224 CVE-2022-21857 · GHSA-wfqc-43cc-jp29

Active Directory Domain Services Elevation of Privilege Vulnerability

MEDIUM 43

Active Directory Domain Services Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02638 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06221 CVE-2022-21851 · GHSA-qqhf-7fqm-49mx

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 43

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02942 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +12

TI-2022-06220 CVE-2022-21850 · GHSA-hgqg-j5g9-wjqr

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 43

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02942 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +12

TI-2022-06278 CVE-2022-21913 · GHSA-w3cw-fh5g-ghvr

Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass

LOW 38

Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02841 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11

TI-2022-06263 CVE-2022-21897 · GHSA-v4jr-rm6p-p2mv

Windows Common Log File System Driver Elevation of Privilege Vulnerability

LOW 38

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01085 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11

TI-2022-06281 CVE-2022-21916 · GHSA-jwhf-5xx5-882m

Windows Common Log File System Driver Elevation of Privilege Vulnerability

LOW 36

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06280 CVE-2022-21915 · GHSA-c8q8-mv4x-f6xr

Windows GDI+ Information Disclosure Vulnerability

LOW 36

Windows GDI+ Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02918 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06274 CVE-2022-21908 · GHSA-mjx6-6qv7-x73w

Windows Installer Elevation of Privilege Vulnerability

LOW 36

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0093 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11

TI-2022-06269 CVE-2022-21903 · GHSA-m3w4-3h4x-56x3

Windows GDI Elevation of Privilege Vulnerability

LOW 36

Windows GDI Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00835 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +7

TI-2022-06279 CVE-2022-21914 · GHSA-5hx2-5438-v8qx

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

LOW 35

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00685 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06252 CVE-2022-21885 · GHSA-9hv9-7xwp-mr77

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

LOW 35

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00685 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11

TI-2022-06251 CVE-2022-21884 · GHSA-gfq7-g4rw-qmmx

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

LOW 35

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00685 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.20348.469 +6

TI-2022-06205 CVE-2022-21835 · GHSA-v2r4-rmwh-m7vf

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

LOW 35

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00685 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06204 CVE-2022-21834 · GHSA-w8qh-prf7-9pcv

Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability

LOW 35

Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00653 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06203 CVE-2022-21833 · GHSA-m2qm-93f9-5g8f

Virtual Machine IDE Drive Elevation of Privilege Vulnerability

LOW 35

Virtual Machine IDE Drive Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00653 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +10

TI-2022-06229 CVE-2022-21862 · GHSA-pp87-f2wm-8cx4

Windows Application Model Core API Elevation of Privilege Vulnerability

LOW 32

Windows Application Model Core API Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00649 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11

TI-2022-06289 CVE-2022-21925 · GHSA-5xq3-7x4j-x2jc

Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability

LOW 30

Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.0307 Published 2022-01-11 Fixed in 6.1.7601.25829, 6.0.6003.21349

TI-2022-06288 CVE-2022-21924 · GHSA-2pg9-pfqj-rjhg

Workstation Service Remote Protocol Security Feature Bypass Vulnerability

LOW 30

Workstation Service Remote Protocol Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.0307 Published 2022-01-11 Fixed in 10.0.17763.2452, 10.0.18363.2037 +11