Microsoft update

KB5018479

Security Only

View on Microsoft →

Fixed in

Windows 7 for 32-bit Systems Service Pack 1 6.1.7601.26174
Windows 7 for x64-based Systems Service Pack 1 6.1.7601.26174
Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.26174
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.26174

Fixes 43 records

TI-2022-19574 CVE-2022-41033 · GHSA-qjvf-mwxj-x748

Windows COM+ Event System Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows COM+ Event System Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01886 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11 CWE-843

TI-2022-17759 CVE-2022-38044 · GHSA-j4hm-f2fm-2737

Windows CD-ROM File System Driver Remote Code Execution Vulnerability

HIGH 69

Windows CD-ROM File System Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.56269 Published 2022-10-11 Fixed in 10.0.22621.674, 10.0.19042.2130 +11

TI-2022-17704 CVE-2022-37985 · GHSA-7j5w-vxpg-45wv

Windows Graphics Component Information Disclosure Vulnerability

MEDIUM 52

Windows Graphics Component Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.38604 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17708 CVE-2022-37989 · GHSA-cgph-949f-5qj9

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

MEDIUM 46

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.09331 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17706 CVE-2022-37987 · GHSA-7qgc-g238-7w3x

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

MEDIUM 46

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.09095 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17750 CVE-2022-38034 · GHSA-xh6x-jf3c-2xmf

Windows Workstation Service Elevation of Privilege Vulnerability

MEDIUM 45

Windows Workstation Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04004 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17766 CVE-2022-38051 · GHSA-f73x-whqx-6jm2

Windows Graphics Component Elevation of Privilege Vulnerability

MEDIUM 44

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0732 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17695 CVE-2022-37976 · GHSA-8vr2-6v7f-c42x

Active Directory Certificate Services Elevation of Privilege Vulnerability

MEDIUM 43

Active Directory Certificate Services Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02386 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.20348.1129 +5

TI-2022-17755 CVE-2022-38040 · GHSA-866q-r6p7-vx88

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 42

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02016 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17747 CVE-2022-38031 · GHSA-mpmc-j3p7-4cq2

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 42

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02016 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17701 CVE-2022-37982 · GHSA-jpv2-v6m7-7mg4

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 42

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02016 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17694 CVE-2022-37975 · GHSA-m9ww-5m5h-g25w

Windows Group Policy Elevation of Privilege Vulnerability

MEDIUM 42

Windows Group Policy Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0193 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-19611 CVE-2022-41081 · GHSA-vmjw-wrqg-9457

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 41

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01948 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-08371 CVE-2022-24504 · GHSA-3p4h-f64c-fmg2

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01456 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11 CWE-362

TI-2022-06388 CVE-2022-22035 · GHSA-v8fp-gf92-786m

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01574 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +10 CWE-362

TI-2022-17719 CVE-2022-38000 · GHSA-32mx-364x-qgq2

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

LOW 39

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0163 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +10 CWE-362

TI-2022-17762 CVE-2022-38047 · GHSA-w4cr-xjrm-vrc8

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

LOW 38

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01468 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11 CWE-362

TI-2022-17756 CVE-2022-38041 · GHSA-9fr8-wggv-7fmg

Windows Secure Channel Denial of Service Vulnerability

LOW 38

Windows Secure Channel Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02611 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +10

TI-2022-14763 CVE-2022-33645 · GHSA-33w6-gxj4-hj26

Windows TCP/IP Driver Denial of Service Vulnerability

LOW 38

Windows TCP/IP Driver Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02643 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-14752 CVE-2022-33634 · GHSA-hc4v-ggpw-hp3w

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

LOW 38

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01456 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11 CWE-362

TI-2022-12463 CVE-2022-30198 · GHSA-4cfc-w93h-9987

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

LOW 38

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01456 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +10 CWE-362

TI-2022-17713 CVE-2022-37994 · GHSA-w654-6m84-r2hc

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

LOW 37

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00653 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17709 CVE-2022-37990 · GHSA-p5gp-xjfm-279x

Windows Kernel Elevation of Privilege Vulnerability

LOW 37

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0069 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17697 CVE-2022-37978 · GHSA-65x5-c54x-hq3v

Windows Active Directory Certificate Services Security Feature Bypass

LOW 37

Windows Active Directory Certificate Services Security Feature Bypass

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01848 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17753 CVE-2022-38038 · GHSA-jj9p-6gqv-vr9g

Windows Kernel Elevation of Privilege Vulnerability

LOW 36

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01115 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17752 CVE-2022-38037 · GHSA-849g-m22c-8qh7

Windows Kernel Elevation of Privilege Vulnerability

LOW 36

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01071 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17710 CVE-2022-37991 · GHSA-cx89-8r6c-gqc6

Windows Kernel Elevation of Privilege Vulnerability

LOW 36

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01089 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17707 CVE-2022-37988 · GHSA-7q22-wjmh-43mq

Windows Kernel Elevation of Privilege Vulnerability

LOW 36

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01089 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-14753 CVE-2022-33635 · GHSA-g649-cj63-c6j2

Windows GDI+ Remote Code Execution Vulnerability

LOW 36

Windows GDI+ Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01132 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17757 CVE-2022-38042 · GHSA-4cwr-vwjh-j2gw

Active Directory Domain Services Elevation of Privilege Vulnerability

LOW 35

Active Directory Domain Services Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.01816 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17718 CVE-2022-37999 · GHSA-wx43-v529-7g82

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

LOW 35

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00653 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17716 CVE-2022-37997 · GHSA-8g39-7r49-jcm2

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 35

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00679 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17712 CVE-2022-37993 · GHSA-g6mx-q549-x9p5

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

LOW 35

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00653 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17705 CVE-2022-37986 · GHSA-hh6p-jmqr-cp97

Windows Win32k Elevation of Privilege Vulnerability

LOW 35

Windows Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0056 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17749 CVE-2022-38033 · GHSA-m2h5-vpg7-8wp3

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability

LOW 33

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02088 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17696 CVE-2022-37977 · GHSA-hc7f-5g7r-j42x

Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

LOW 33

Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02336 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-16212 CVE-2022-35770 · GHSA-vchj-x6c5-p264

Windows NTLM Spoofing Vulnerability

LOW 33

Windows NTLM Spoofing Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02076 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11 CWE-290

TI-2022-17745 CVE-2022-38029 · GHSA-m7xh-99rj-c889

Windows ALPC Elevation of Privilege Vulnerability

LOW 32

Windows ALPC Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00766 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11 CWE-362

TI-2022-17748 CVE-2022-38032 · GHSA-6f9p-8jgv-p63r

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

LOW 30

Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.6 Physical Low privileges No interaction EPSS 0.00712 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +11

TI-2022-17758 CVE-2022-38043 · GHSA-rw3j-949g-mvhg

Windows Security Support Provider Interface Information Disclosure Vulnerability

LOW 26

Windows Security Support Provider Interface Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00647 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +10

TI-2022-17742 CVE-2022-38026 · GHSA-59hx-7v8g-p3hq

Windows DHCP Client Information Disclosure Vulnerability

LOW 26

Windows DHCP Client Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00647 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +10

TI-2022-17700 CVE-2022-37981 · GHSA-jgwg-xv24-v8wg

Windows Event Logging Service Denial of Service Vulnerability

LOW 25

Windows Event Logging Service Denial of Service Vulnerability

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.02891 Published 2022-10-11 Fixed in 10.0.22621.674, 10.0.19044.2130 +11

TI-2022-17739 CVE-2022-38022 · GHSA-7jr8-4rjf-gh7f

Windows Kernel Elevation of Privilege Vulnerability

LOW 17

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00679 Published 2022-10-11 Fixed in 10.0.17763.3532, 10.0.19043.2130 +10