Microsoft Patch Tuesday — June 2022

Tuesday, 14 June 2022

Vulnerabilities: 51
Critical: 1
High: 40
Zero-days: 0
Public exploit: 1

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 1

Critical 9.8
CVE-2022-30136 Public exploit Windows Network File System Remote Code Execution Vulnerability
EPSS 73%

All vulnerabilities 51

Critical1 Show

Critical 9.8
CVE-2022-30136 Public exploit Windows Network File System Remote Code Execution Vulnerability
EPSS 73%

High40 Show

High 8.8
CVE-2022-30153 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
EPSS 2.6%
High 8.8
CVE-2022-30157 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 7.3%
High 8.8
CVE-2022-30158 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 3.5%
High 8.8
CVE-2022-30161 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
EPSS 2.6%
High 8.8
CVE-2022-30165 Windows Kerberos Elevation of Privilege Vulnerability
EPSS 5.1%
High 8.5
CVE-2022-30163 Windows Hyper-V Remote Code Execution Vulnerability
EPSS 1.8%
High 8.3
CVE-2022-22021 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
EPSS 3.2%
High 8.1
CVE-2022-30141 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
EPSS 2.5%
High 7.8
CVE-2022-22018 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2022-29111 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2022-29119 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2022-29149 Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
High 7.8
CVE-2022-30131 Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2022-30132 Windows Container Manager Service Elevation of Privilege Vulnerability
High 7.8
CVE-2022-30135 Windows Media Center Elevation of Privilege Vulnerability
High 7.8
CVE-2022-30147 Windows Installer Elevation of Privilege Vulnerability
EPSS 4.4%
High 7.8
CVE-2022-30160 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
EPSS 6.4%
High 7.8
CVE-2022-30164 Kerberos AppContainer Security Feature Bypass Vulnerability
EPSS 1.2%
High 7.8
CVE-2022-30166 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
EPSS 1.4%
High 7.8
CVE-2022-30167 AV1 Video Extension Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2022-30168 Microsoft Photos App Remote Code Execution Vulnerability
EPSS 2.9%
High 7.8
CVE-2022-30173 Microsoft Excel Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2022-30174 Microsoft Office Remote Code Execution Vulnerability
EPSS 3.3%
High 7.8
CVE-2022-30177 Azure RTOS GUIX Studio Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2022-30178 Azure RTOS GUIX Studio Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2022-30179 Azure RTOS GUIX Studio Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2022-30180 Azure RTOS GUIX Studio Information Disclosure Vulnerability
EPSS 2.4%
High 7.8
CVE-2022-30188 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2022-30193 AV1 Video Extension Remote Code Execution Vulnerability
EPSS 2.4%
High 7.5
CVE-2022-29143 Microsoft SQL Server Remote Code Execution Vulnerability
EPSS 2.3%
High 7.5
CVE-2022-30139 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
EPSS 2.3%
High 7.5
CVE-2022-30140 Windows iSCSI Discovery Service Remote Code Execution Vulnerability
EPSS 2%
High 7.5
CVE-2022-30142 Windows File History Remote Code Execution Vulnerability
EPSS 2.4%
High 7.5
CVE-2022-30143 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
EPSS 2%
High 7.5
CVE-2022-30145 Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
EPSS 2.1%
High 7.5
CVE-2022-30146 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
EPSS 2%
High 7.5
CVE-2022-30149 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
EPSS 2%
High 7.5
CVE-2022-30150 Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability
EPSS 3.6%
High 7.5
CVE-2022-30152 Windows Network Address Translation (NAT) Denial of Service Vulnerability
EPSS 3.1%
High 7.0
CVE-2022-30151 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Medium10 Show

Medium 6.7
CVE-2022-30137 Azure Service Fabric Container Elevation of Privilege Vulnerability
EPSS 1.2%
Medium 6.5
CVE-2022-30189 Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability
EPSS 2.9%
Medium 5.5
CVE-2022-30148 Windows Desired State Configuration (DSC) Information Disclosure Vulnerability
EPSS 1.3%
Medium 5.5
CVE-2022-30155 Windows Kernel Denial of Service Vulnerability
EPSS 5.3%
Medium 5.5
CVE-2022-30159 Microsoft Office Information Disclosure Vulnerability
EPSS 3%
Medium 5.5
CVE-2022-30162 Windows Kernel Information Disclosure Vulnerability
Medium 5.5
CVE-2022-30171 Microsoft Office Information Disclosure Vulnerability
EPSS 2.8%
Medium 5.5
CVE-2022-30172 Microsoft Office Information Disclosure Vulnerability
EPSS 3%
Medium 5.5
CVE-2022-30184 .NET and Visual Studio Information Disclosure Vulnerability
EPSS 6.1%
Medium 5.3
CVE-2022-30154 Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability
EPSS 1.8%