Microsoft update

KB5014678

Security Update

View on Microsoft →

Fixed in

Windows Server 2022 10.0.20348.770
Windows Server 2022 (Server Core installation) 10.0.20348.770

Fixes 26 records

TI-2022-12457 CVE-2022-30190 · GHSA-4r9q-wqcj-x85j

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

CRITICAL 93KEV

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.99163 Published 2022-06-01 Fixed in 10.0.17763.3046, 10.0.19043.1766 +9

TI-2022-12437 CVE-2022-30165 · GHSA-4v3j-q36m-pfpg

Windows Kerberos Elevation of Privilege Vulnerability

HIGH 73

Windows Kerberos Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05094 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +4

TI-2022-12433 CVE-2022-30161 · GHSA-j2vc-96xv-2jh3

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 43

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02611 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +9

TI-2022-12432 CVE-2022-30160 · GHSA-w5cc-q23v-r9ff

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

MEDIUM 43

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.06443 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +9

TI-2022-12426 CVE-2022-30153 · GHSA-9qvp-8v9h-3rcw

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 43

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02611 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +9

TI-2022-12420 CVE-2022-30147 · GHSA-hg2j-xjg7-8qrc

Windows Installer Elevation of Privilege Vulnerability

MEDIUM 43

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04405 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +9

TI-2022-12435 CVE-2022-30163 · GHSA-qqpj-wj6v-fwq4

Windows Hyper-V Remote Code Execution Vulnerability

MEDIUM 40

Windows Hyper-V Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.01808 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +9 CWE-362

TI-2022-12414 CVE-2022-30141 · GHSA-7c5q-5246-vr4p

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

MEDIUM 40

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02517 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +9

TI-2022-12423 CVE-2022-30150 · GHSA-mx7x-2w55-hvv3

Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability

LOW 39

Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0356 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +4 CWE-287

TI-2022-12415 CVE-2022-30142 · GHSA-p7w8-rjwc-h423

Windows File History Remote Code Execution Vulnerability

LOW 39

Windows File History Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.02382 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +8

TI-2022-12436 CVE-2022-30164 · GHSA-hr8p-p44m-q8x6

Kerberos AppContainer Security Feature Bypass Vulnerability

LOW 38

Kerberos AppContainer Security Feature Bypass Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01192 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +7

TI-2022-12425 CVE-2022-30152 · GHSA-22jh-hqf7-v4mw

Windows Network Address Translation (NAT) Denial of Service Vulnerability

LOW 38

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0309 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +9

TI-2022-12438 CVE-2022-30166 · GHSA-pj8j-v9wg-f4qf

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

LOW 37

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01437 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +9

TI-2022-12422 CVE-2022-30149 · GHSA-g9pj-9rx7-4mf8

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

LOW 37

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.02034 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +9

TI-2022-12419 CVE-2022-30146 · GHSA-389h-737c-f3fq

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

LOW 37

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.02034 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +9

TI-2022-12418 CVE-2022-30145 · GHSA-32cw-v82j-575w

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

LOW 37

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.02146 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +4

TI-2022-12416 CVE-2022-30143 · GHSA-p679-56p3-wphw

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

LOW 37

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.02034 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +9

TI-2022-12413 CVE-2022-30140 · GHSA-4hm7-3pqc-622q

Windows iSCSI Discovery Service Remote Code Execution Vulnerability

LOW 37

Windows iSCSI Discovery Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.02034 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +9

TI-2022-12412 CVE-2022-30139 · GHSA-xvxm-rm97-hmmp

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

LOW 37

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.02311 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +5

TI-2022-12404 CVE-2022-30131 · GHSA-29mx-jm4m-v9x5

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

LOW 36

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0084 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +3

TI-2022-12405 CVE-2022-30132 · GHSA-39xj-x95v-6v4r

Windows Container Manager Service Elevation of Privilege Vulnerability

LOW 35

Windows Container Manager Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00693 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +3

TI-2022-12428 CVE-2022-30155 · GHSA-3cm8-8gxq-6jr4

Windows Kernel Denial of Service Vulnerability

LOW 33

Windows Kernel Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.05326 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +9 CWE-193

TI-2022-12424 CVE-2022-30151 · GHSA-prc2-p7fh-5q7j

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

LOW 32

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00566 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +9

TI-2022-12427 CVE-2022-30154 · GHSA-wvgr-fcfh-4f5q

Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability

LOW 28

Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01826 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.20348.770 +4

TI-2022-12421 CVE-2022-30148 · GHSA-q9v8-hhcr-3g53

Windows Desired State Configuration (DSC) Information Disclosure Vulnerability

LOW 28

Windows Desired State Configuration (DSC) Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01321 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +4 CWE-532

TI-2022-12434 CVE-2022-30162 · GHSA-4p34-j86v-c444

Windows Kernel Information Disclosure Vulnerability

LOW 26

Windows Kernel Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00848 Published 2022-06-15 Fixed in 10.0.17763.3046, 10.0.19043.1766 +6