Patch days / January 2022

Microsoft Patch Tuesday — January 2022

Tuesday, 11 January 2022

Vulnerabilities: 100
Critical: 6
High: 63
Zero-days: 0
Public exploit: 7

Exploited 2

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.0
CVE-2022-21882 Exploited Public exploit Win32k Elevation of Privilege Vulnerability
EPSS 59%
High 7.0
CVE-2022-21919 Exploited Windows User Profile Service Elevation of Privilege Vulnerability
EPSS 2.6%

Critical 6

Critical 9.8
CVE-2022-21907 Public exploit HTTP Protocol Stack Remote Code Execution Vulnerability
EPSS 93%
Critical 9.8
CVE-2022-21849 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
EPSS 6.6%
Critical 9.0
CVE-2022-21846 Microsoft Exchange Server Remote Code Execution Vulnerability
EPSS 1.1%
Critical 9.0
CVE-2022-21855 Microsoft Exchange Server Remote Code Execution Vulnerability
Critical 9.0
CVE-2022-21901 Windows Hyper-V Elevation of Privilege Vulnerability
Critical 9.0
CVE-2022-21969 Microsoft Exchange Server Remote Code Execution Vulnerability
EPSS 1.1%

Public exploit code 5

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 7.0
CVE-2022-21881 Public exploit Windows Kernel Elevation of Privilege Vulnerability
EPSS 25%
Medium 6.1
CVE-2022-21839 Public exploit Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability
EPSS 1.5%
Medium 6.1
CVE-2022-21970 Public exploit Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
EPSS 2.7%
Medium 5.5
CVE-2022-21877 Public exploit Storage Spaces Controller Information Disclosure Vulnerability
EPSS 2.9%
Medium 4.4
CVE-2022-21894 Public exploit Secure Boot Security Feature Bypass Vulnerability
EPSS 9.1%

All vulnerabilities 100

Critical6 Show

Critical 9.8
CVE-2022-21907 Public exploit HTTP Protocol Stack Remote Code Execution Vulnerability
EPSS 93%
Critical 9.8
CVE-2022-21849 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
EPSS 6.6%
Critical 9.0
CVE-2022-21846 Microsoft Exchange Server Remote Code Execution Vulnerability
EPSS 1.1%
Critical 9.0
CVE-2022-21855 Microsoft Exchange Server Remote Code Execution Vulnerability
Critical 9.0
CVE-2022-21901 Windows Hyper-V Elevation of Privilege Vulnerability
Critical 9.0
CVE-2022-21969 Microsoft Exchange Server Remote Code Execution Vulnerability
EPSS 1.1%

High63 Show

High 7.0
CVE-2022-21882 Exploited Public exploit Win32k Elevation of Privilege Vulnerability
EPSS 59%
High 7.0
CVE-2022-21919 Exploited Windows User Profile Service Elevation of Privilege Vulnerability
EPSS 2.6%
High 8.8
CVE-2022-21840 Microsoft Office Remote Code Execution Vulnerability
EPSS 3.3%
High 8.8
CVE-2022-21850 Remote Desktop Client Remote Code Execution Vulnerability
EPSS 2.9%
High 8.8
CVE-2022-21851 Remote Desktop Client Remote Code Execution Vulnerability
EPSS 2.9%
High 8.8
CVE-2022-21857 Active Directory Domain Services Elevation of Privilege Vulnerability
EPSS 2.6%
High 8.8
CVE-2022-21920 Windows Kerberos Elevation of Privilege Vulnerability
EPSS 2.9%
High 8.8
CVE-2022-21922 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 2.9%
High 8.3
CVE-2022-21837 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 3.2%
High 8.0
CVE-2022-21893 Remote Desktop Protocol Remote Code Execution Vulnerability
EPSS 8.6%
High 7.8
CVE-2022-21833 Virtual Machine IDE Drive Elevation of Privilege Vulnerability
High 7.8
CVE-2022-21835 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
High 7.8
CVE-2022-21836 Windows Certificate Spoofing Vulnerability
High 7.8
CVE-2022-21841 Microsoft Excel Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2022-21842 Microsoft Word Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2022-21852 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2022-21858 Windows Bind Filter Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2022-21874 Windows Security Center API Remote Code Execution Vulnerability
EPSS 2.5%
High 7.8
CVE-2022-21878 Windows Geolocation Service Remote Code Execution Vulnerability
EPSS 2.8%
High 7.8
CVE-2022-21884 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
High 7.8
CVE-2022-21885 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
High 7.8
CVE-2022-21888 Windows Modern Execution Server Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2022-21895 Windows User Profile Service Elevation of Privilege Vulnerability
EPSS 1.3%
High 7.8
CVE-2022-21897 Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2022-21898 DirectX Graphics Kernel Remote Code Execution Vulnerability
EPSS 2.5%
High 7.8
CVE-2022-21902 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2022-21908 Windows Installer Elevation of Privilege Vulnerability
High 7.8
CVE-2022-21910 Microsoft Cluster Port Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2022-21912 DirectX Graphics Kernel Remote Code Execution Vulnerability
High 7.8
CVE-2022-21914 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
High 7.8
CVE-2022-21916 Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 1%
High 7.8
CVE-2022-21917 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 3.8%
High 7.6
CVE-2022-21891 Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability
EPSS 1.6%
High 7.6
CVE-2022-21932 Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
EPSS 1.1%
High 7.5
CVE-2022-21843 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
EPSS 3.6%
High 7.5
CVE-2022-21848 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
EPSS 4.4%
High 7.5
CVE-2022-21880 Windows GDI+ Information Disclosure Vulnerability
EPSS 4.1%
High 7.5
CVE-2022-21883 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
EPSS 4.6%
High 7.5
CVE-2022-21889 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
EPSS 3.2%
High 7.5
CVE-2022-21890 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
EPSS 3.2%
High 7.5
CVE-2022-21904 Windows GDI Information Disclosure Vulnerability
EPSS 3.7%
High 7.5
CVE-2022-21911 .NET Framework Denial of Service Vulnerability
EPSS 3.2%
High 7.0
CVE-2022-21881 Public exploit Windows Kernel Elevation of Privilege Vulnerability
EPSS 25%
High 7.0
CVE-2022-21834 Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21859 Windows Accounts Control Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21860 Windows AppContracts API Server Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21861 Task Flow Data Engine Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21862 Windows Application Model Core API Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21863 Windows StateRepository API Server file Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21864 Windows UI Immersive Server API Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21865 Connected Devices Platform Service Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21866 Windows System Launcher Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21867 Windows Push Notifications Apps Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21868 Windows Devices Human Interface Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21869 Clipboard User Service Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21870 Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21871 Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21872 Windows Event Tracing Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21873 Tile Data Repository Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21875 Windows Storage Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21887 Win32k Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.0
CVE-2022-21896 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.0
CVE-2022-21903 Windows GDI Elevation of Privilege Vulnerability

Medium30 Show

Medium 6.8
CVE-2022-21892 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Medium 6.8
CVE-2022-21958 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Medium 6.8
CVE-2022-21959 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Medium 6.8
CVE-2022-21960 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Medium 6.8
CVE-2022-21961 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Medium 6.8
CVE-2022-21962 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Medium 6.5
CVE-2022-21847 Windows Hyper-V Denial of Service Vulnerability
EPSS 1%
Medium 6.5
CVE-2022-21915 Windows GDI+ Information Disclosure Vulnerability
EPSS 2.9%
Medium 6.5
CVE-2022-21918 DirectX Graphics Kernel File Denial of Service Vulnerability
EPSS 1.1%
Medium 6.4
CVE-2022-21963 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Medium 6.3
CVE-2022-21928 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Medium 6.1
CVE-2022-21839 Public exploit Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability
EPSS 1.5%
Medium 6.1
CVE-2022-21970 Public exploit Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
EPSS 2.7%
Medium 6.1
CVE-2022-21954 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
EPSS 1.6%
Medium 5.5
CVE-2022-21877 Public exploit Storage Spaces Controller Information Disclosure Vulnerability
EPSS 2.9%
Medium 5.5
CVE-2022-21838 Windows Cleanup Manager Elevation of Privilege Vulnerability
EPSS 1.5%
Medium 5.5
CVE-2022-21876 Win32k Information Disclosure Vulnerability
EPSS 1.3%
Medium 5.5
CVE-2022-21879 Windows Kernel Elevation of Privilege Vulnerability
EPSS 1%
Medium 5.5
CVE-2022-21899 Windows Extensible Firmware Interface Security Feature Bypass Vulnerability
EPSS 1.5%
Medium 5.5
CVE-2022-21906 Windows Defender Application Control Security Feature Bypass Vulnerability
EPSS 1.1%
Medium 5.5
CVE-2022-21964 Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability
Medium 5.3
CVE-2022-21913 Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass
EPSS 2.8%
Medium 5.3
CVE-2022-21924 Workstation Service Remote Protocol Security Feature Bypass Vulnerability
EPSS 3.1%
Medium 5.3
CVE-2022-21925 Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability
EPSS 3.1%
Medium 4.6
CVE-2022-21900 Windows Hyper-V Security Feature Bypass Vulnerability
Medium 4.6
CVE-2022-21905 Windows Hyper-V Security Feature Bypass Vulnerability
Medium 4.4
CVE-2022-21894 Public exploit Secure Boot Security Feature Bypass Vulnerability
EPSS 9.1%
Medium 4.4
CVE-2022-21921 Windows Defender Credential Guard Security Feature Bypass Vulnerability
Medium 4.2
CVE-2022-21930 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
EPSS 1.3%
Medium 4.2
CVE-2022-21931 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
EPSS 1.3%

Low1 Show

Low 2.5
CVE-2022-21929 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
EPSS 1.5%

Most affected products

Windows Server 2019 79 · 3 crit.
Windows Server 2019 (Server Core installation) 79 · 3 crit.
Windows Server 2022 78 · 3 crit.
Windows Server version 20H2 78 · 3 crit.
Windows 10 Version 1809 77 · 3 crit.
Windows 10 Version 21H2 76 · 3 crit.
Windows 10 Version 21H1 76 · 3 crit.
Windows 10 Version 1909 74 · 2 crit.
Windows 10 Version 20H2 72 · 2 crit.
Windows 11 version 21H2 63 · 3 crit.
Windows Server 2016 62 · 2 crit.
Windows Server 2016 (Server Core installation) 62 · 2 crit.

About this page

CVEs published by Microsoft as CVE numbering authority from the day before to two days after its patch day (11 Jan). Exploitation status is updated daily, so a vulnerability can turn red after the release.

All Microsoft vulnerabilities →