Patch days / July 2022

Microsoft Patch Tuesday — July 2022

Tuesday, 12 July 2022

Vulnerabilities: 81
Critical: 0
High: 38
Zero-days: 1
Public exploit: 4

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.8
CVE-2022-22047 Zero-day Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
EPSS 18%

Public exploit code 4

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2022-30216 Public exploit Windows Server Service Tampering Vulnerability
EPSS 88%
High 8.1
CVE-2022-22029 Public exploit Windows Network File System Remote Code Execution Vulnerability
EPSS 5.2%
High 7.8
CVE-2022-30206 Public exploit Windows Print Spooler Elevation of Privilege Vulnerability
EPSS 2.2%
High 7.4
CVE-2022-30203 Public exploit Windows Boot Manager Security Feature Bypass Vulnerability
EPSS 1.6%

All vulnerabilities 81

High38 Show

High 7.8
CVE-2022-22047 Zero-day Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
EPSS 18%
High 8.8
CVE-2022-30216 Public exploit Windows Server Service Tampering Vulnerability
EPSS 88%
High 8.8
CVE-2022-22026 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
EPSS 1%
High 8.8
CVE-2022-30221 Windows Graphics Component Remote Code Execution Vulnerability
EPSS 2.1%
High 8.4
CVE-2022-30222 Windows Shell Remote Code Execution Vulnerability
High 8.3
CVE-2022-33674 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.1%
High 8.1
CVE-2022-22029 Public exploit Windows Network File System Remote Code Execution Vulnerability
EPSS 5.2%
High 8.1
CVE-2022-22038 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 2.5%
High 7.8
CVE-2022-30206 Public exploit Windows Print Spooler Elevation of Privilege Vulnerability
EPSS 2.2%
High 7.8
CVE-2022-22024 Windows Fax Service Remote Code Execution Vulnerability
EPSS 2.2%
High 7.8
CVE-2022-22027 Windows Fax Service Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2022-22031 Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability
High 7.8
CVE-2022-22034 Windows Graphics Component Elevation of Privilege Vulnerability
EPSS 6.1%
High 7.8
CVE-2022-22043 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2022-22045 Windows.Devices.Picker.dll Elevation of Privilege Vulnerability
High 7.8
CVE-2022-22049 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2022-22050 Windows Fax Service Elevation of Privilege Vulnerability
High 7.8
CVE-2022-30220 Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 5.1%
High 7.8
CVE-2022-33675 Azure Site Recovery Elevation of Privilege Vulnerability
High 7.5
CVE-2022-22025 Windows Internet Information Services Cachuri Module Denial of Service Vulnerability
EPSS 33%
High 7.5
CVE-2022-22037 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
EPSS 2.6%
High 7.5
CVE-2022-22039 Windows Network File System Remote Code Execution Vulnerability
EPSS 2.3%
High 7.5
CVE-2022-30211 Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
EPSS 2.1%
High 7.5
CVE-2022-30215 Active Directory Federation Services Elevation of Privilege Vulnerability
EPSS 1.9%
High 7.4
CVE-2022-30203 Public exploit Windows Boot Manager Security Feature Bypass Vulnerability
EPSS 1.6%
High 7.4
CVE-2022-30209 Windows IIS Server Elevation of Privilege Vulnerability
EPSS 2.6%
High 7.3
CVE-2022-22040 Internet Information Services Dynamic Compression Module Denial of Service Vulnerability
EPSS 1.5%
High 7.2
CVE-2022-33633 Skype for Business and Lync Remote Code Execution Vulnerability
EPSS 2.4%
High 7.2
CVE-2022-33676 Azure Site Recovery Remote Code Execution Vulnerability
EPSS 2.4%
High 7.2
CVE-2022-33677 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.4%
High 7.2
CVE-2022-33678 Azure Site Recovery Remote Code Execution Vulnerability
EPSS 2.4%
High 7.1
CVE-2022-22022 Windows Print Spooler Elevation of Privilege Vulnerability
High 7.1
CVE-2022-30225 Windows Media Player Network Sharing Service Elevation of Privilege Vulnerability
High 7.1
CVE-2022-30226 Windows Print Spooler Elevation of Privilege Vulnerability
High 7.0
CVE-2022-22036 Performance Counters for Windows Elevation of Privilege Vulnerability
High 7.0
CVE-2022-30202 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
EPSS 4.3%
High 7.0
CVE-2022-30224 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
High 7.0
CVE-2022-33644 Xbox Live Save Service Elevation of Privilege Vulnerability

Medium43 Show

Medium 6.8
CVE-2022-22041 Windows Print Spooler Elevation of Privilege Vulnerability
EPSS 2.8%
Medium 6.6
CVE-2022-22023 Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
Medium 6.6
CVE-2022-30205 Windows Group Policy Elevation of Privilege Vulnerability
EPSS 1.2%
Medium 6.6
CVE-2022-30214 Windows DNS Server Remote Code Execution Vulnerability
EPSS 1.1%
Medium 6.5
CVE-2022-22042 Windows Hyper-V Information Disclosure Vulnerability
EPSS 2.7%
Medium 6.5
CVE-2022-30181 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2022-30208 Windows Security Account Manager (SAM) Denial of Service Vulnerability
EPSS 2.6%
Medium 6.5
CVE-2022-33637 Microsoft Defender for Endpoint Tampering Vulnerability
EPSS 1.7%
Medium 6.5
CVE-2022-33641 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2022-33643 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2022-33655 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.1%
Medium 6.5
CVE-2022-33656 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2022-33657 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2022-33661 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2022-33662 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2022-33663 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2022-33665 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2022-33666 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2022-33667 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2022-33672 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2022-33673 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.9%
Medium 6.1
CVE-2022-22048 BitLocker Security Feature Bypass Vulnerability
Medium 5.9
CVE-2022-22028 Windows Network File System Information Disclosure Vulnerability
EPSS 2.4%
Medium 5.7
CVE-2022-22711 Windows BitLocker Information Disclosure Vulnerability
Medium 5.7
CVE-2022-30223 Windows Hyper-V Information Disclosure Vulnerability
Medium 5.5
CVE-2022-30213 Windows GDI+ Information Disclosure Vulnerability
Medium 4.9
CVE-2022-33642 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.3%
Medium 4.9
CVE-2022-33650 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.3%
Medium 4.9
CVE-2022-33651 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.3%
Medium 4.9
CVE-2022-33652 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.3%
Medium 4.9
CVE-2022-33653 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.3%
Medium 4.9
CVE-2022-33654 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.3%
Medium 4.9
CVE-2022-33658 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.3%
Medium 4.9
CVE-2022-33659 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.3%
Medium 4.9
CVE-2022-33660 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.3%
Medium 4.9
CVE-2022-33664 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.3%
Medium 4.9
CVE-2022-33668 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.3%
Medium 4.9
CVE-2022-33669 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.3%
Medium 4.9
CVE-2022-33671 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.3%
Medium 4.7
CVE-2022-21845 Windows Kernel Information Disclosure Vulnerability
Medium 4.7
CVE-2022-30187 Azure Storage Library Information Disclosure Vulnerability
Medium 4.7
CVE-2022-30212 Windows Connected Devices Platform Service Information Disclosure Vulnerability
Medium 4.7
CVE-2022-33632 Microsoft Office Security Feature Bypass Vulnerability
EPSS 1.2%