Microsoft update

KB5015827

Security Update

View on Microsoft →

Fixed in

Windows Server 2022 10.0.20348.825
Windows Server 2022 (Server Core installation) 10.0.20348.825

Fixes 44 records

TI-2022-06398 CVE-2022-22047 · GHSA-p4j8-4hv2-8733

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.18765 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10 CWE-426

TI-2022-12476 CVE-2022-30216 · GHSA-gpxc-hjqg-f39p

Windows Server Service Tampering Vulnerability

HIGH 80

Windows Server Service Tampering Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.88617 Published 2022-07-12 Fixed in 10.0.19043.1826, 10.0.20348.825 +3 CWE-434

TI-2022-12468 CVE-2022-30206 · GHSA-r965-729w-j5h7

Windows Print Spooler Elevation of Privilege Vulnerability

HIGH 69

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02218 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-06381 CVE-2022-22025 · GHSA-hhmm-3887-jfh7

Windows Internet Information Services Cachuri Module Denial of Service Vulnerability

MEDIUM 63

Windows Internet Information Services Cachuri Module Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.32699 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-12467 CVE-2022-30205 · GHSA-wx2r-54rx-4jv7

Windows Group Policy Elevation of Privilege Vulnerability

MEDIUM 62

Windows Group Policy Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.01195 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10 CWE-362

TI-2022-06387 CVE-2022-22034 · GHSA-76cf-7583-4wm6

Windows Graphics Component Elevation of Privilege Vulnerability

MEDIUM 45

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.06248 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10 CWE-416

TI-2022-06385 CVE-2022-22029 · GHSA-jxc7-whr7-3xx6

Windows Network File System Remote Code Execution Vulnerability

MEDIUM 45

Windows Network File System Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.05221 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.20348.825 +6

TI-2022-12478 CVE-2022-30221 · GHSA-2v99-wrwh-28v3

Windows Graphics Component Remote Code Execution Vulnerability

MEDIUM 44

Windows Graphics Component Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02119 Published 2022-07-12 Fixed in 10.0.17763.3165, 1.2.3317.0 +8

TI-2022-12477 CVE-2022-30220 · GHSA-wjmr-9rc2-8h64

Windows Common Log File System Driver Elevation of Privilege Vulnerability

MEDIUM 44

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.05204 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-06391 CVE-2022-22038 · GHSA-w6q9-7cpp-3pmp

Remote Procedure Call Runtime Remote Code Execution Vulnerability

MEDIUM 42

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02518 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +8

TI-2022-06382 CVE-2022-22026 · GHSA-mqc2-2jgq-8887

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

MEDIUM 42

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01024 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10 CWE-787

TI-2022-06386 CVE-2022-22031 · GHSA-9fmj-x3g8-hmqv

Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability

MEDIUM 41

Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00709 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +6 CWE-312

TI-2022-12479 CVE-2022-30222 · GHSA-v6q4-72w8-p47g

Windows Shell Remote Code Execution Vulnerability

MEDIUM 40

Windows Shell Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00729 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +5

TI-2022-12465 CVE-2022-30202 · GHSA-9cr6-j4rm-w596

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

MEDIUM 40

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.04469 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-06390 CVE-2022-22037 · GHSA-2mv7-g8jg-j2fh

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

MEDIUM 40

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.02498 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-06380 CVE-2022-22024 · GHSA-4g8q-xx7j-h7cc

Windows Fax Service Remote Code Execution Vulnerability

MEDIUM 40

Windows Fax Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02109 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-12475 CVE-2022-30215 · GHSA-c549-c54c-qvxq

Active Directory Federation Services Elevation of Privilege Vulnerability

LOW 39

Active Directory Federation Services Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01872 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.20348.825 +2

TI-2022-12471 CVE-2022-30211 · GHSA-648c-cv8r-86r5

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

LOW 39

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.02067 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-12470 CVE-2022-30209 · GHSA-x6mx-c3c5-2fmr

Windows IIS Server Elevation of Privilege Vulnerability

LOW 39

Windows IIS Server Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.02562 Published 2022-07-12 Fixed in 10.0.14393.5246, 6.1.7601.26022 +10

TI-2022-06392 CVE-2022-22039 · GHSA-rx4w-347q-2m87

Windows Network File System Remote Code Execution Vulnerability

LOW 39

Windows Network File System Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.02317 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.20348.825 +6

TI-2022-06400 CVE-2022-22049 · GHSA-8gv9-w486-3g6c

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

LOW 38

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01056 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10 CWE-787

TI-2022-06383 CVE-2022-22027 · GHSA-v8qw-p8wf-qx5h

Windows Fax Service Remote Code Execution Vulnerability

LOW 38

Windows Fax Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02228 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-12466 CVE-2022-30203 · GHSA-q8p2-xppf-9g83

Windows Boot Manager Security Feature Bypass Vulnerability

LOW 37

Windows Boot Manager Security Feature Bypass Vulnerability

CVSS 3.1HIGH 7.4 Physical Low privileges No interaction EPSS 0.01497 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10 CWE-863

TI-2022-06397 CVE-2022-22045 · GHSA-gq6v-7w53-4742

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability

LOW 37

Windows.Devices.Picker.dll Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0055 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +5

TI-2022-06396 CVE-2022-22043 · GHSA-422m-5rg7-4pvv

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

LOW 37

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00721 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-06394 CVE-2022-22041 · GHSA-rc8p-h3m3-5mqp

Windows Print Spooler Elevation of Privilege Vulnerability

LOW 37

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.02705 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +8

TI-2022-06401 CVE-2022-22050 · GHSA-4xp9-98hh-fjqj

Windows Fax Service Elevation of Privilege Vulnerability

LOW 35

Windows Fax Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00634 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-06393 CVE-2022-22040 · GHSA-8fp6-xwm6-hv42

Internet Information Services Dynamic Compression Module Denial of Service Vulnerability

LOW 35

Internet Information Services Dynamic Compression Module Denial of Service Vulnerability

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01498 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-12469 CVE-2022-30208 · GHSA-gmwm-9wcr-2rw5

Windows Security Account Manager (SAM) Denial of Service Vulnerability

LOW 34

Windows Security Account Manager (SAM) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02501 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-06395 CVE-2022-22042 · GHSA-m63h-r8c8-cp94

Windows Hyper-V Information Disclosure Vulnerability

LOW 34

Windows Hyper-V Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0266 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +9

TI-2022-12483 CVE-2022-30226 · GHSA-2vpj-39cg-g8g7

Windows Print Spooler Elevation of Privilege Vulnerability

LOW 33

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00776 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-06389 CVE-2022-22036 · GHSA-x7pr-h6wr-hf4j

Performance Counters for Windows Elevation of Privilege Vulnerability

LOW 33

Performance Counters for Windows Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00506 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +9

TI-2022-06378 CVE-2022-22022 · GHSA-5mfj-fwj4-3fpw

Windows Print Spooler Elevation of Privilege Vulnerability

LOW 33

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00776 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-12482 CVE-2022-30225 · GHSA-mxgc-xwr6-4rr2

Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability

LOW 32

Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00562 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +9

TI-2022-06379 CVE-2022-22023 · GHSA-q5mv-5g22-rg38

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

LOW 32

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00602 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-12481 CVE-2022-30224 · GHSA-v4fj-xpm7-phwr

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

LOW 31

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00513 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-12474 CVE-2022-30214 · GHSA-hrjc-jcq2-jg57

Windows DNS Server Remote Code Execution Vulnerability

LOW 31

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.01076 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.20348.825 +2 CWE-362

TI-2022-06399 CVE-2022-22048 · GHSA-4fxj-629w-3rvv

BitLocker Security Feature Bypass Vulnerability

LOW 31

BitLocker Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.1 Physical No auth No interaction EPSS 0.0076 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-06384 CVE-2022-22028 · GHSA-4qpv-rcpm-mqxr

Windows Network File System Information Disclosure Vulnerability

LOW 31

Windows Network File System Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02434 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.20348.825 +6

TI-2022-06962 CVE-2022-22711 · GHSA-2h44-v83q-fj6m

Windows BitLocker Information Disclosure Vulnerability

LOW 28

Windows BitLocker Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.7 Local High privileges No interaction EPSS 0.00513 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +6

TI-2022-12480 CVE-2022-30223 · GHSA-p997-gqmp-p66h

Windows Hyper-V Information Disclosure Vulnerability

LOW 27

Windows Hyper-V Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00832 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +9

TI-2022-12473 CVE-2022-30213 · GHSA-6qq7-fphw-32j3

Windows GDI+ Information Disclosure Vulnerability

LOW 26

Windows GDI+ Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0073 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-06215 CVE-2022-21845 · GHSA-g37v-jxpm-83fp

Windows Kernel Information Disclosure Vulnerability

LOW 23

Windows Kernel Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00677 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +10

TI-2022-12472 CVE-2022-30212 · GHSA-3rh4-hgwg-p5c2

Windows Connected Devices Platform Service Information Disclosure Vulnerability

LOW 22

Windows Connected Devices Platform Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00455 Published 2022-07-12 Fixed in 10.0.17763.3165, 10.0.19043.1826 +4 CWE-362