Microsoft update

KB5018411

Security Update

View on Microsoft →

Fixed in

Windows 10 Version 1607 for 32-bit Systems 10.0.14393.5427
Windows 10 Version 1607 for x64-based Systems 10.0.14393.5427
Windows Server 2016 10.0.14393.5427
Windows Server 2016 (Server Core installation) 10.0.14393.5427

Fixes 53 records

TI-2022-19574 CVE-2022-41033 · GHSA-qjvf-mwxj-x748

Windows COM+ Event System Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows COM+ Event System Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01886 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11 CWE-843

TI-2022-17744 CVE-2022-38028 · GHSA-5vrq-5cmx-xwfc

Windows Print Spooler Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.14949 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +9

TI-2022-17759 CVE-2022-38044 · GHSA-j4hm-f2fm-2737

Windows CD-ROM File System Driver Remote Code Execution Vulnerability

HIGH 69

Windows CD-ROM File System Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.56269 Published 2022-10-11 Fixed in 10.0.22621.674, 10.0.19042.2130 +11

TI-2022-17704 CVE-2022-37985 · GHSA-7j5w-vxpg-45wv

Windows Graphics Component Information Disclosure Vulnerability

MEDIUM 52

Windows Graphics Component Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.38604 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17708 CVE-2022-37989 · GHSA-cgph-949f-5qj9

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

MEDIUM 46

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.09331 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17706 CVE-2022-37987 · GHSA-7qgc-g238-7w3x

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

MEDIUM 46

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.09095 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17760 CVE-2022-38045 · GHSA-x4cp-qc28-2pqp

Windows Server Service Elevation of Privilege Vulnerability

MEDIUM 45

Windows Server Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02808 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +9

TI-2022-17750 CVE-2022-38034 · GHSA-xh6x-jf3c-2xmf

Windows Workstation Service Elevation of Privilege Vulnerability

MEDIUM 45

Windows Workstation Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04004 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17766 CVE-2022-38051 · GHSA-f73x-whqx-6jm2

Windows Graphics Component Elevation of Privilege Vulnerability

MEDIUM 44

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0732 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17695 CVE-2022-37976 · GHSA-8vr2-6v7f-c42x

Active Directory Certificate Services Elevation of Privilege Vulnerability

MEDIUM 43

Active Directory Certificate Services Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02386 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.20348.1129 +5

TI-2022-17755 CVE-2022-38040 · GHSA-866q-r6p7-vx88

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 42

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02016 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17747 CVE-2022-38031 · GHSA-mpmc-j3p7-4cq2

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 42

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02016 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17701 CVE-2022-37982 · GHSA-jpv2-v6m7-7mg4

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 42

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02016 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17694 CVE-2022-37975 · GHSA-m9ww-5m5h-g25w

Windows Group Policy Elevation of Privilege Vulnerability

MEDIUM 42

Windows Group Policy Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0193 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-19611 CVE-2022-41081 · GHSA-vmjw-wrqg-9457

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 41

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01948 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-08371 CVE-2022-24504 · GHSA-3p4h-f64c-fmg2

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01456 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11 CWE-362

TI-2022-06388 CVE-2022-22035 · GHSA-v8fp-gf92-786m

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01574 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +10 CWE-362

TI-2022-17719 CVE-2022-38000 · GHSA-32mx-364x-qgq2

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

LOW 39

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0163 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +10 CWE-362

TI-2022-17762 CVE-2022-38047 · GHSA-w4cr-xjrm-vrc8

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

LOW 38

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01468 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11 CWE-362

TI-2022-17756 CVE-2022-38041 · GHSA-9fr8-wggv-7fmg

Windows Secure Channel Denial of Service Vulnerability

LOW 38

Windows Secure Channel Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02611 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +10

TI-2022-14763 CVE-2022-33645 · GHSA-33w6-gxj4-hj26

Windows TCP/IP Driver Denial of Service Vulnerability

LOW 38

Windows TCP/IP Driver Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02643 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-14752 CVE-2022-33634 · GHSA-hc4v-ggpw-hp3w

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

LOW 38

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01456 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11 CWE-362

TI-2022-12463 CVE-2022-30198 · GHSA-4cfc-w93h-9987

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

LOW 38

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01456 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +10 CWE-362

TI-2022-17713 CVE-2022-37994 · GHSA-w654-6m84-r2hc

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

LOW 37

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00653 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17709 CVE-2022-37990 · GHSA-p5gp-xjfm-279x

Windows Kernel Elevation of Privilege Vulnerability

LOW 37

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0069 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17698 CVE-2022-37979 · GHSA-x64m-975w-xpwq

Windows Hyper-V Elevation of Privilege Vulnerability

LOW 37

Windows Hyper-V Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00631 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +5

TI-2022-17697 CVE-2022-37978 · GHSA-65x5-c54x-hq3v

Windows Active Directory Certificate Services Security Feature Bypass

LOW 37

Windows Active Directory Certificate Services Security Feature Bypass

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01848 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17753 CVE-2022-38038 · GHSA-jj9p-6gqv-vr9g

Windows Kernel Elevation of Privilege Vulnerability

LOW 36

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01115 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17752 CVE-2022-38037 · GHSA-849g-m22c-8qh7

Windows Kernel Elevation of Privilege Vulnerability

LOW 36

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01071 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17710 CVE-2022-37991 · GHSA-cx89-8r6c-gqc6

Windows Kernel Elevation of Privilege Vulnerability

LOW 36

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01089 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17707 CVE-2022-37988 · GHSA-7q22-wjmh-43mq

Windows Kernel Elevation of Privilege Vulnerability

LOW 36

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01089 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-14753 CVE-2022-33635 · GHSA-g649-cj63-c6j2

Windows GDI+ Remote Code Execution Vulnerability

LOW 36

Windows GDI+ Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01132 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17757 CVE-2022-38042 · GHSA-4cwr-vwjh-j2gw

Active Directory Domain Services Elevation of Privilege Vulnerability

LOW 35

Active Directory Domain Services Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.01816 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17721 CVE-2022-38003 · GHSA-3rpm-6p6h-45fh

Windows Resilient File System Elevation of Privilege

LOW 35

Windows Resilient File System Elevation of Privilege

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0064 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +6

TI-2022-17718 CVE-2022-37999 · GHSA-wx43-v529-7g82

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

LOW 35

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00653 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17716 CVE-2022-37997 · GHSA-8g39-7r49-jcm2

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 35

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00679 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17714 CVE-2022-37995 · GHSA-r8vv-grrx-gcm5

Windows Kernel Elevation of Privilege Vulnerability

LOW 35

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00644 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +6

TI-2022-17712 CVE-2022-37993 · GHSA-g6mx-q549-x9p5

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

LOW 35

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00653 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17705 CVE-2022-37986 · GHSA-hh6p-jmqr-cp97

Windows Win32k Elevation of Privilege Vulnerability

LOW 35

Windows Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0056 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17703 CVE-2022-37984 · GHSA-rm76-9qmq-2873

Windows WLAN Service Elevation of Privilege Vulnerability

LOW 35

Windows WLAN Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00539 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +9

TI-2022-17749 CVE-2022-38033 · GHSA-m2h5-vpg7-8wp3

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability

LOW 33

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02088 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17696 CVE-2022-37977 · GHSA-hc7f-5g7r-j42x

Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

LOW 33

Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02336 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-16212 CVE-2022-35770 · GHSA-vchj-x6c5-p264

Windows NTLM Spoofing Vulnerability

LOW 33

Windows NTLM Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02076 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11 CWE-290

TI-2022-17745 CVE-2022-38029 · GHSA-m7xh-99rj-c889

Windows ALPC Elevation of Privilege Vulnerability

LOW 32

Windows ALPC Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00766 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11 CWE-362

TI-2022-17743 CVE-2022-38027 · GHSA-xh92-7747-9m8g

Windows Storage Elevation of Privilege Vulnerability

LOW 31

Windows Storage Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0043 Published 2022-10-11 Fixed in 10.0.22621.674, 10.0.22000.1098 +9 CWE-362

TI-2022-17738 CVE-2022-38021 · GHSA-6gvp-vcq2-qc46

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

LOW 31

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.0043 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +6 CWE-362

TI-2022-17748 CVE-2022-38032 · GHSA-6f9p-8jgv-p63r

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

LOW 30

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00712 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17684 CVE-2022-37965 · GHSA-xfch-m6x4-vxpc

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

LOW 30

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01907 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +9

TI-2022-17758 CVE-2022-38043 · GHSA-rw3j-949g-mvhg

Windows Security Support Provider Interface Information Disclosure Vulnerability

LOW 26

Windows Security Support Provider Interface Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00647 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +10

TI-2022-17742 CVE-2022-38026 · GHSA-59hx-7v8g-p3hq

Windows DHCP Client Information Disclosure Vulnerability

LOW 26

Windows DHCP Client Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00647 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +10

TI-2022-17715 CVE-2022-37996 · GHSA-4gqc-ggg8-rxcq

Windows Kernel Memory Information Disclosure Vulnerability

LOW 26

Windows Kernel Memory Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00647 Published 2022-10-11 Fixed in 10.0.22621.674, 10.0.19044.2130 +8

TI-2022-17700 CVE-2022-37981 · GHSA-jgwg-xv24-v8wg

Windows Event Logging Service Denial of Service Vulnerability

LOW 25

Windows Event Logging Service Denial of Service Vulnerability

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.02891 Published 2022-10-11 Fixed in 10.0.22621.674, 10.0.19044.2130 +11

TI-2022-17739 CVE-2022-38022 · GHSA-7jr8-4rjf-gh7f

Windows Kernel Elevation of Privilege Vulnerability

LOW 17

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00679 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +10