Microsoft update

KB5019080

Security Hotpatch Update

View on Microsoft →

Fixed in

Windows Server 2022 10.0.20348.1251
Windows Server 2022 (Server Core installation) 10.0.20348.1251

Fixes 35 records

TI-2022-19649 CVE-2022-41128 · GHSA-778m-x5h7-mg59

Windows Scripting Languages Remote Code Execution Vulnerability

CRITICAL 97KEV

Windows Scripting Languages Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.24623 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +11 CWE-787

TI-2022-19647 CVE-2022-41125 · GHSA-5vr9-7945-27pf

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03046 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +10 CWE-787

TI-2022-19604 CVE-2022-41073 · GHSA-6xmp-59j9-c5x2

Windows Print Spooler Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02627 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12 CWE-787

TI-2022-19619 CVE-2022-41091 · GHSA-ccv7-v4mw-3wqq

Windows Mark of the Web Security Feature Bypass Vulnerability

HIGH 82KEV

Windows Mark of the Web Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.02254 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +8 CWE-863

TI-2022-19588 CVE-2022-41049 · GHSA-wjh3-j799-8ppv

Windows Mark of the Web Security Feature Bypass Vulnerability

HIGH 82KEV

Windows Mark of the Web Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.03266 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +8

TI-2022-19636 CVE-2022-41109 · GHSA-j6g9-pmm4-cf6x

Windows Win32k Elevation of Privilege Vulnerability

MEDIUM 47

Windows Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.08119 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19597 CVE-2022-41058 · GHSA-4mjm-25wv-522x

Windows Network Address Translation (NAT) Denial of Service Vulnerability

MEDIUM 44

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02539 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19595 CVE-2022-41056 · GHSA-8q7r-6j5j-gw7r

Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability

MEDIUM 44

Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02539 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19592 CVE-2022-41053 · GHSA-57fh-v8jp-xg75

Windows Kerberos Denial of Service Vulnerability

MEDIUM 44

Windows Kerberos Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02519 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19587 CVE-2022-41048 · GHSA-2j7q-245v-xcrj

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 42

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01948 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19586 CVE-2022-41047 · GHSA-g7q6-hf7c-74p8

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 42

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01948 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19616 CVE-2022-41088 · GHSA-57vv-75gm-f6rc

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01261 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +10 CWE-362

TI-2022-19580 CVE-2022-41039 · GHSA-gx32-v6vm-f5g5

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01393 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +11 CWE-362

TI-2023-08096 CVE-2023-21712 · GHSA-5mg6-xp8p-mrrm

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

LOW 39

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00993 Published 2023-04-27 Fixed in 10.0.17763.3650, 10.0.19043.2251 +10 CWE-362

TI-2022-19596 CVE-2022-41057 · GHSA-9vrw-gg2j-hwj3

Windows HTTP.sys Elevation of Privilege Vulnerability

LOW 39

Windows HTTP.sys Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01255 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19620 CVE-2022-41092 · GHSA-m6qx-xw3h-g789

Windows Win32k Elevation of Privilege Vulnerability

LOW 38

Windows Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00807 Published 2022-11-09 Fixed in 10.0.19042.2251, 10.0.19043.2251 +5

TI-2022-19591 CVE-2022-41052 · GHSA-wqjg-jqh8-mxmf

Windows Graphics Component Remote Code Execution Vulnerability

LOW 38

Windows Graphics Component Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00941 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +7

TI-2022-19623 CVE-2022-41095 · GHSA-qhq7-qg5x-87h8

Windows Digital Media Receiver Elevation of Privilege Vulnerability

LOW 37

Windows Digital Media Receiver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00575 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19593 CVE-2022-41054 · GHSA-x8rg-8rqv-3645

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

LOW 37

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00579 Published 2022-11-09 Fixed in 10.0.14393.5501, 10.0.17763.3650 +7

TI-2022-19589 CVE-2022-41050 · GHSA-vpwv-fpvm-498c

Windows Extensible File Allocation Table Elevation of Privilege Vulnerability

LOW 37

Windows Extensible File Allocation Table Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00606 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +8

TI-2022-17711 CVE-2022-37992 · GHSA-x82j-4gxg-pv7v

Windows Group Policy Elevation of Privilege Vulnerability

LOW 37

Windows Group Policy Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00583 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19641 CVE-2022-41118 · GHSA-84wj-46vv-37cw

Windows Scripting Languages Remote Code Execution Vulnerability

LOW 36

Windows Scripting Languages Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01369 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +10 CWE-362

TI-2022-19628 CVE-2022-41100 · GHSA-8rv7-9xg2-8mvc

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

LOW 36

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00351 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +9 CWE-362

TI-2022-19621 CVE-2022-41093 · GHSA-wc7p-3vcr-979v

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

LOW 36

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00344 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +9 CWE-362

TI-2022-19585 CVE-2022-41045 · GHSA-9p7f-fp2w-2p9p

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

LOW 36

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00351 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12 CWE-362

TI-2022-19630 CVE-2022-41102 · GHSA-rvhf-7m78-crqm

Windows Overlay Filter Elevation of Privilege Vulnerability

LOW 35

Windows Overlay Filter Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00596 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +8

TI-2022-19629 CVE-2022-41101 · GHSA-wgcf-fpfr-vg96

Windows Overlay Filter Elevation of Privilege Vulnerability

LOW 35

Windows Overlay Filter Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00596 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +8

TI-2022-19624 CVE-2022-41096 · GHSA-vfgg-7jw9-pp5v

Microsoft DWM Core Library Elevation of Privilege Vulnerability

LOW 35

Microsoft DWM Core Library Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00719 Published 2022-11-09 Fixed in 10.0.17763.3650, 10.0.19042.2251 +6

TI-2022-19638 CVE-2022-41114 · GHSA-2w4r-fj83-hjp4

Windows Bind Filter Driver Elevation of Privilege Vulnerability

LOW 34

Windows Bind Filter Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00632 Published 2022-11-09 Fixed in 10.0.19042.2251, 10.0.19043.2251 +5 CWE-362

TI-2022-19625 CVE-2022-41097 · GHSA-jpx8-52vc-rx3v

Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability

LOW 33

Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02011 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19615 CVE-2022-41086 · GHSA-2346-6pqf-j299

Windows Group Policy Elevation of Privilege Vulnerability

LOW 30

Windows Group Policy Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00296 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12 CWE-362

TI-2022-17733 CVE-2022-38015 · GHSA-wjg5-5qv5-gjgf

Windows Hyper-V Denial of Service Vulnerability

LOW 30

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00697 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +7

TI-2022-19618 CVE-2022-41090 · GHSA-6qg5-h75r-mq6j

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

LOW 29

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01285 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +11 CWE-362

TI-2022-19626 CVE-2022-41098 · GHSA-fjq5-p3q6-fjxc

Windows GDI+ Information Disclosure Vulnerability

LOW 26

Windows GDI+ Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00853 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19594 CVE-2022-41055 · GHSA-fw94-7m9j-xxjj

Windows Human Interface Device Information Disclosure Vulnerability

LOW 26

Windows Human Interface Device Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00644 Published 2022-11-09 Fixed in 10.0.17763.3650, 10.0.19042.2251 +6