Microsoft update

KB5013943

Security Update

View on Microsoft →

Fixed in

Windows 11 version 21H2 for ARM64-based Systems 10.0.22000.675
Windows 11 version 21H2 for x64-based Systems 10.0.22000.675

Fixes 44 records

TI-2022-10156 CVE-2022-26925 · GHSA-jr4h-hc9r-9rr3

Windows LSA Spoofing Vulnerability

CRITICAL 92KEV

Windows LSA Spoofing Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.10476 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10 CWE-306

TI-2022-06331 CVE-2022-21972 · GHSA-h7pq-fm7p-5x88

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

HIGH 75

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.79347 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-07395 CVE-2022-23270 · GHSA-gcc8-9qcm-vmc4

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

HIGH 73

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.7035 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-06374 CVE-2022-22017 · GHSA-xwch-gx2x-qj27

Remote Desktop Client Remote Code Execution Vulnerability

MEDIUM 64

Remote Desktop Client Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.37105 Published 2022-05-10 Fixed in 1.2.3130, 10.0.20348.707 +1

TI-2022-11676 CVE-2022-29130 · GHSA-qjg2-f326-rjmh

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 50

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03932 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-06369 CVE-2022-22012 · GHSA-x48p-wmq2-jh5f

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 50

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04176 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-11652 CVE-2022-29104 · GHSA-mj9p-gcpr-r3x5

Windows Print Spooler Elevation of Privilege Vulnerability

MEDIUM 48

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.11758 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +8

TI-2022-10158 CVE-2022-26927 · GHSA-ff6r-62wv-fr5p

Windows Graphics Component Remote Code Execution Vulnerability

MEDIUM 47

Windows Graphics Component Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04599 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +4

TI-2022-11686 CVE-2022-29141 · GHSA-837r-f284-r2j7

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 43

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02831 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-11684 CVE-2022-29139 · GHSA-829g-cgr3-q9gr

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 43

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02431 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-11682 CVE-2022-29137 · GHSA-47vj-fpvh-fw26

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 43

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02475 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-11677 CVE-2022-29131 · GHSA-qggr-f98q-xqvv

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 43

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02898 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +4

TI-2022-11675 CVE-2022-29129 · GHSA-pr2w-cp3p-3rfm

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 43

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02898 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-11674 CVE-2022-29128 · GHSA-635w-w3v7-284v

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 43

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02898 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-06376 CVE-2022-22019 · GHSA-hcpj-prm9-mcpv

Remote Procedure Call Runtime Remote Code Execution Vulnerability

MEDIUM 43

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02718 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-06371 CVE-2022-22014 · GHSA-5p3w-jhr3-vc9h

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 43

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02475 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-06370 CVE-2022-22013 · GHSA-x8hh-7hcv-r23r

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 43

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02475 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-10157 CVE-2022-26926 · GHSA-v5qg-36wv-7qpm

Windows Address Book Remote Code Execution Vulnerability

MEDIUM 41

Windows Address Book Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02805 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10 CWE-284

TI-2022-10162 CVE-2022-26931 · GHSA-rcq2-f9v3-rfv8

Windows Kerberos Elevation of Privilege Vulnerability

MEDIUM 40

Windows Kerberos Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.02688 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-11679 CVE-2022-29133 · GHSA-frh4-wq5p-8mjf

Windows Kernel Elevation of Privilege Vulnerability

LOW 39

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00764 Published 2022-05-10 Fixed in 10.0.22000.675

TI-2022-11663 CVE-2022-29115 · GHSA-55r2-frc9-27m7

Windows Fax Service Remote Code Execution Vulnerability

LOW 39

Windows Fax Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02407 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-07403 CVE-2022-23279 · GHSA-h9fv-c74q-375h

Windows ALPC Elevation of Privilege Vulnerability

LOW 38

Windows ALPC Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.04724 Published 2022-05-10 Fixed in 10.0.18363.2274, 10.0.19043.1706 +3

TI-2022-10145 CVE-2022-26913 · GHSA-58h8-g2p9-78p3

Windows Authentication Information Disclosure Vulnerability

LOW 37

Windows Authentication Information Disclosure Vulnerability

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.02457 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +4

TI-2022-12411 CVE-2022-30138 · GHSA-77r6-c33j-gw48

Windows Print Spooler Elevation of Privilege Vulnerability

LOW 36

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01029 Published 2022-05-18 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-11678 CVE-2022-29132 · GHSA-h63p-8q2p-crmm

Windows Print Spooler Elevation of Privilege Vulnerability

LOW 35

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00705 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-11660 CVE-2022-29112 · GHSA-pwf7-2p5c-8x94

Windows Graphics Component Information Disclosure Vulnerability

LOW 35

Windows Graphics Component Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03466 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-11651 CVE-2022-29103 · GHSA-2r6m-j7xh-c9fv

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

LOW 35

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00642 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-11672 CVE-2022-29126 · GHSA-2h9p-fvvm-92g9

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability

LOW 34

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00636 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +8

TI-2022-11671 CVE-2022-29125 · GHSA-g5fr-p479-cq2p

Windows Push Notifications Apps Elevation of Privilege Vulnerability

LOW 34

Windows Push Notifications Apps Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00756 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +8

TI-2022-11661 CVE-2022-29113 · GHSA-m629-g935-wmqw

Windows Digital Media Receiver Elevation of Privilege Vulnerability

LOW 34

Windows Digital Media Receiver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00435 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +3 CWE-362

TI-2022-10171 CVE-2022-26940 · GHSA-r3g9-4c8x-fwv7

Remote Desktop Protocol Client Information Disclosure Vulnerability

LOW 34

Remote Desktop Protocol Client Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02684 Published 2022-05-10 Fixed in 1.2.3130, 10.0.20348.707 +1

TI-2022-10167 CVE-2022-26936 · GHSA-mc5p-gx9g-cgp5

Windows Server Service Information Disclosure Vulnerability

LOW 34

Windows Server Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03073 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-10165 CVE-2022-26934 · GHSA-38pr-c838-mh5j

Windows Graphics Component Information Disclosure Vulnerability

LOW 34

Windows Graphics Component Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03097 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +12

TI-2022-06372 CVE-2022-22015 · GHSA-635p-hjhc-rmqg

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

LOW 34

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02684 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-06373 CVE-2022-22016 · GHSA-v2w6-2f8c-x7mr

Windows PlayToManager Elevation of Privilege Vulnerability

LOW 32

Windows PlayToManager Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0058 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +6

TI-2022-11668 CVE-2022-29121 · GHSA-r4cg-hhq8-4362

Windows WLAN AutoConfig Service Denial of Service Vulnerability

LOW 31

Windows WLAN AutoConfig Service Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00973 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-10166 CVE-2022-26935 · GHSA-2h9q-f394-cmcx

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

LOW 31

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01087 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-11662 CVE-2022-29114 · GHSA-r76x-cw2m-h5mf

Windows Print Spooler Information Disclosure Vulnerability

LOW 28

Windows Print Spooler Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01322 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +8

TI-2022-11685 CVE-2022-29140 · GHSA-7h44-fqxc-wp7h

Windows Print Spooler Information Disclosure Vulnerability

LOW 27

Windows Print Spooler Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01212 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +5

TI-2022-10164 CVE-2022-26933 · GHSA-7mvw-h642-vqv7

Windows NTFS Information Disclosure Vulnerability

LOW 27

Windows NTFS Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00919 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +8

TI-2022-10161 CVE-2022-26930 · GHSA-8hr8-85qr-jj9x

Windows Remote Access Connection Manager Information Disclosure Vulnerability

LOW 26

Windows Remote Access Connection Manager Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00865 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +8

TI-2022-11664 CVE-2022-29116 · GHSA-3g9j-4fcm-pr52

Windows Kernel Information Disclosure Vulnerability

LOW 22

Windows Kernel Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00583 Published 2022-05-10 Fixed in 10.0.22000.675 CWE-362

TI-2022-11673 CVE-2022-29127 · GHSA-w729-69h8-4fwx

BitLocker Security Feature Bypass Vulnerability

LOW 21

BitLocker Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.2 Physical No auth No interaction EPSS 0.00858 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +10

TI-2022-08335 CVE-2022-24466 · GHSA-hpw9-5gqc-mg62

Windows Hyper-V Security Feature Bypass Vulnerability

LOW 21

Windows Hyper-V Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.1 Adjacent network Low privileges No interaction EPSS 0.0074 Published 2022-05-10 Fixed in 10.0.17763.2928, 10.0.18363.2274 +6