Microsoft update

KB5020000

Monthly Rollup

View on Microsoft →

Fixed in

Windows 7 for 32-bit Systems Service Pack 1 6.1.7601.26221
Windows 7 for x64-based Systems Service Pack 1 6.1.7601.26221
Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.26221
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.26221

Fixes 20 records

TI-2022-19649 CVE-2022-41128 · GHSA-778m-x5h7-mg59

Windows Scripting Languages Remote Code Execution Vulnerability

CRITICAL 97KEV

Windows Scripting Languages Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.24623 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +11 CWE-787

TI-2022-19604 CVE-2022-41073 · GHSA-6xmp-59j9-c5x2

Windows Print Spooler Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02627 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12 CWE-787

TI-2022-19636 CVE-2022-41109 · GHSA-j6g9-pmm4-cf6x

Windows Win32k Elevation of Privilege Vulnerability

MEDIUM 47

Windows Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.08119 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19597 CVE-2022-41058 · GHSA-4mjm-25wv-522x

Windows Network Address Translation (NAT) Denial of Service Vulnerability

MEDIUM 44

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02539 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19595 CVE-2022-41056 · GHSA-8q7r-6j5j-gw7r

Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability

MEDIUM 44

Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02539 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19592 CVE-2022-41053 · GHSA-57fh-v8jp-xg75

Windows Kerberos Denial of Service Vulnerability

MEDIUM 44

Windows Kerberos Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02519 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19587 CVE-2022-41048 · GHSA-2j7q-245v-xcrj

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 42

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01948 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19586 CVE-2022-41047 · GHSA-g7q6-hf7c-74p8

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 42

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01948 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19584 CVE-2022-41044 · GHSA-6wrg-q4hc-hrw5

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01334 Published 2022-11-09 Fixed in 6.1.7601.26221, 6.0.6003.21768 CWE-362

TI-2022-19580 CVE-2022-41039 · GHSA-gx32-v6vm-f5g5

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01393 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +11 CWE-362

TI-2022-19596 CVE-2022-41057 · GHSA-9vrw-gg2j-hwj3

Windows HTTP.sys Elevation of Privilege Vulnerability

LOW 39

Windows HTTP.sys Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01255 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19623 CVE-2022-41095 · GHSA-qhq7-qg5x-87h8

Windows Digital Media Receiver Elevation of Privilege Vulnerability

LOW 37

Windows Digital Media Receiver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00575 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-17711 CVE-2022-37992 · GHSA-x82j-4gxg-pv7v

Windows Group Policy Elevation of Privilege Vulnerability

LOW 37

Windows Group Policy Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00583 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19641 CVE-2022-41118 · GHSA-84wj-46vv-37cw

Windows Scripting Languages Remote Code Execution Vulnerability

LOW 36

Windows Scripting Languages Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01369 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +10 CWE-362

TI-2022-19585 CVE-2022-41045 · GHSA-9p7f-fp2w-2p9p

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

LOW 36

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00351 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12 CWE-362

TI-2022-19625 CVE-2022-41097 · GHSA-jpx8-52vc-rx3v

Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability

LOW 33

Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02011 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12

TI-2022-19615 CVE-2022-41086 · GHSA-2346-6pqf-j299

Windows Group Policy Elevation of Privilege Vulnerability

LOW 30

Windows Group Policy Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00296 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12 CWE-362

TI-2022-19640 CVE-2022-41116 · GHSA-c7mp-wpm2-4qqg

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

LOW 29

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01285 Published 2022-11-09 Fixed in 6.1.7601.26221 CWE-362

TI-2022-19618 CVE-2022-41090 · GHSA-6qg5-h75r-mq6j

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

LOW 29

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01285 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +11 CWE-362

TI-2022-19626 CVE-2022-41098 · GHSA-fjq5-p3q6-fjxc

Windows GDI+ Information Disclosure Vulnerability

LOW 26

Windows GDI+ Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00853 Published 2022-11-09 Fixed in 10.0.10240.19567, 10.0.14393.5501 +12