Microsoft update

KB5021291

Monthly Rollup

View on Microsoft →

Fixed in

Windows 7 for 32-bit Systems Service Pack 1 6.1.7601.26266
Windows 7 for x64-based Systems Service Pack 1 6.1.7601.26266
Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.26266
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.26266

Fixes 15 records

TI-2022-19606 CVE-2022-41076 · GHSA-hcfw-r2rr-7g6c

PowerShell Remote Code Execution Vulnerability

HIGH 71

PowerShell Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.60779 Published 2022-12-13 Fixed in 7.2.8, 7.3.1 +14

TI-2022-21972 CVE-2022-44666 · GHSA-7g33-cr66-hx65

Windows Contacts Remote Code Execution Vulnerability

MEDIUM 64

Windows Contacts Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.41372 Published 2022-12-13 Fixed in 10.0.17763.3770, 10.0.19043.2364 +12

TI-2022-21980 CVE-2022-44675 · GHSA-hp5q-5crg-wxxr

Windows Bluetooth Driver Elevation of Privilege Vulnerability

MEDIUM 42

Windows Bluetooth Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.04979 Published 2022-12-13 Fixed in 10.0.17763.3770, 10.0.19043.2364 +11

TI-2022-21978 CVE-2022-44673 · GHSA-gjq9-gv86-9pf8

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

MEDIUM 41

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.05245 Published 2022-12-13 Fixed in 10.0.17763.3770, 10.0.19043.2364 +8

TI-2022-21976 CVE-2022-44670 · GHSA-rqfh-7fx4-3747

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

MEDIUM 40

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01218 Published 2022-12-13 Fixed in 10.0.17763.3770, 10.0.19043.2364 +12 CWE-367

TI-2022-21981 CVE-2022-44676 · GHSA-2mcc-4f9v-m34r

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

LOW 38

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01157 Published 2022-12-13 Fixed in 10.0.17763.3770, 10.0.19043.2364 +12 CWE-362

TI-2022-21974 CVE-2022-44668 · GHSA-4849-rvp6-f473

Windows Media Remote Code Execution Vulnerability

LOW 38

Windows Media Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00812 Published 2022-12-13 Fixed in 10.0.17763.3770, 10.0.19043.2364 +11

TI-2022-21973 CVE-2022-44667 · GHSA-grpq-q766-ph73

Windows Media Remote Code Execution Vulnerability

LOW 38

Windows Media Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00812 Published 2022-12-13 Fixed in 10.0.17763.3770, 10.0.19043.2364 +11

TI-2022-22000 CVE-2022-44697 · GHSA-jwq4-phmp-pch6

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 37

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00549 Published 2022-12-13 Fixed in 10.0.17763.3770, 10.0.19043.2364 +12

TI-2022-21986 CVE-2022-44681 · GHSA-8rjj-53rf-qcw9

Windows Print Spooler Elevation of Privilege Vulnerability

LOW 37

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0055 Published 2022-12-13 Fixed in 10.0.17763.3770, 10.0.19043.2364 +12

TI-2022-21983 CVE-2022-44678 · GHSA-cp33-h46p-57mj

Windows Print Spooler Elevation of Privilege Vulnerability

LOW 37

Windows Print Spooler Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00562 Published 2022-12-13 Fixed in 10.0.17763.3770, 10.0.19043.2364 +12

TI-2022-19622 CVE-2022-41094 · GHSA-hc83-ffpj-rp9h

Windows Hyper-V Elevation of Privilege Vulnerability

LOW 37

Windows Hyper-V Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00527 Published 2022-12-13 Fixed in 10.0.17763.3770, 10.0.19043.2364 +11

TI-2022-19607 CVE-2022-41077 · GHSA-f9g9-qcpx-rfvp

Windows Fax Compose Form Elevation of Privilege Vulnerability

LOW 37

Windows Fax Compose Form Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00549 Published 2022-12-13 Fixed in 10.0.17763.3770, 10.0.19043.2364 +12

TI-2022-19644 CVE-2022-41121 · GHSA-wqh9-8hv3-wc58

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 36

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01119 Published 2022-12-13 Fixed in 10.0.17763.3770, 10.0.19043.2364 +12

TI-2022-19605 CVE-2022-41074 · GHSA-jrgv-532q-5552

Windows Graphics Component Information Disclosure Vulnerability

LOW 26

Windows Graphics Component Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00558 Published 2022-12-13 Fixed in 10.0.17763.3770, 10.0.19043.2364 +12