Patch days / August 2022

Microsoft Patch Tuesday — August 2022

Tuesday, 9 August 2022

Vulnerabilities: 103
Critical: 3
High: 55
Zero-days: 1
Public exploit: 1

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.8
CVE-2022-34713 Zero-day Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
EPSS 68%

Critical 3

Critical 9.8
CVE-2022-34715 Public exploit Windows Network File System Remote Code Execution Vulnerability
EPSS 80%
Critical 9.8
CVE-2022-30133 Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
EPSS 2.8%
Critical 9.6
CVE-2022-33649 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
EPSS 2.4%

All vulnerabilities 103

Critical3 Show

Critical 9.8
CVE-2022-34715 Public exploit Windows Network File System Remote Code Execution Vulnerability
EPSS 80%
Critical 9.8
CVE-2022-30133 Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
EPSS 2.8%
Critical 9.6
CVE-2022-33649 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
EPSS 2.4%

High55 Show

High 7.8
CVE-2022-34713 Zero-day Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
EPSS 68%
High 8.8
CVE-2022-34691 Active Directory Domain Services Elevation of Privilege Vulnerability
EPSS 2.4%
High 8.8
CVE-2022-34717 Microsoft Office Remote Code Execution Vulnerability
EPSS 2%
High 8.8
CVE-2022-35777 Visual Studio Remote Code Execution Vulnerability
EPSS 2.1%
High 8.8
CVE-2022-35804 SMB Client and Server Remote Code Execution Vulnerability
EPSS 3%
High 8.8
CVE-2022-35825 Visual Studio Remote Code Execution Vulnerability
EPSS 2.2%
High 8.8
CVE-2022-35826 Visual Studio Remote Code Execution Vulnerability
EPSS 2.2%
High 8.8
CVE-2022-35827 Visual Studio Remote Code Execution Vulnerability
EPSS 2.2%
High 8.3
CVE-2022-33636 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
EPSS 1.3%
High 8.1
CVE-2022-34702 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
EPSS 1.3%
High 8.1
CVE-2022-34714 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
EPSS 2%
High 8.1
CVE-2022-35766 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
EPSS 1.8%
High 8.1
CVE-2022-35767 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
EPSS 1.8%
High 8.1
CVE-2022-35794 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
EPSS 2%
High 8.1
CVE-2022-35802 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
High 8.0
CVE-2022-21980 Microsoft Exchange Server Elevation of Privilege Vulnerability
EPSS 2.7%
High 8.0
CVE-2022-24477 Microsoft Exchange Server Elevation of Privilege Vulnerability
EPSS 2.3%
High 8.0
CVE-2022-24516 Microsoft Exchange Server Elevation of Privilege Vulnerability
EPSS 2.4%
High 7.8
CVE-2022-30175 Azure RTOS GUIX Studio Remote Code Execution Vulnerability
EPSS 1.2%
High 7.8
CVE-2022-30176 Azure RTOS GUIX Studio Remote Code Execution Vulnerability
High 7.8
CVE-2022-33640 System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
High 7.8
CVE-2022-33648 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2022-33670 Windows Partition Management Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2022-34687 Azure RTOS GUIX Studio Remote Code Execution Vulnerability
High 7.8
CVE-2022-34696 Windows Hyper-V Remote Code Execution Vulnerability
High 7.8
CVE-2022-34699 Windows Win32k Elevation of Privilege Vulnerability
EPSS 4.5%
High 7.8
CVE-2022-34703 Windows Partition Management Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2022-34705 Windows Defender Credential Guard Elevation of Privilege Vulnerability
High 7.8
CVE-2022-34706 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
High 7.8
CVE-2022-34707 Windows Kernel Elevation of Privilege Vulnerability
EPSS 1.3%
High 7.8
CVE-2022-35760 Microsoft ATA Port Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2022-35761 Windows Kernel Elevation of Privilege Vulnerability
EPSS 4.1%
High 7.8
CVE-2022-35762 Storage Spaces Direct Elevation of Privilege Vulnerability
High 7.8
CVE-2022-35763 Storage Spaces Direct Elevation of Privilege Vulnerability
High 7.8
CVE-2022-35764 Storage Spaces Direct Elevation of Privilege Vulnerability
High 7.8
CVE-2022-35765 Storage Spaces Direct Elevation of Privilege Vulnerability
High 7.8
CVE-2022-35768 Windows Kernel Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2022-35771 Windows Defender Credential Guard Elevation of Privilege Vulnerability
High 7.8
CVE-2022-35773 Azure RTOS GUIX Studio Remote Code Execution Vulnerability
High 7.8
CVE-2022-35779 Azure RTOS GUIX Studio Remote Code Execution Vulnerability
High 7.8
CVE-2022-35792 Storage Spaces Direct Elevation of Privilege Vulnerability
High 7.8
CVE-2022-35795 Windows Error Reporting Service Elevation of Privilege Vulnerability
High 7.8
CVE-2022-35806 Azure RTOS GUIX Studio Remote Code Execution Vulnerability
High 7.8
CVE-2022-35820 Windows Bluetooth Driver Elevation of Privilege Vulnerability
High 7.5
CVE-2022-30144 Windows Bluetooth Service Remote Code Execution Vulnerability
High 7.5
CVE-2022-30194 Windows WebBrowser Control Remote Code Execution Vulnerability
EPSS 1.5%
High 7.5
CVE-2022-34701 Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
EPSS 2.9%
High 7.5
CVE-2022-35769 Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
EPSS 2.5%
High 7.5
CVE-2022-35796 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
EPSS 1.4%
High 7.3
CVE-2022-33631 Microsoft Excel Security Feature Bypass Vulnerability
High 7.3
CVE-2022-35793 Windows Print Spooler Elevation of Privilege Vulnerability
EPSS 9.4%
High 7.2
CVE-2022-35772 Azure Site Recovery Remote Code Execution Vulnerability
EPSS 2.4%
High 7.2
CVE-2022-35824 Azure Site Recovery Remote Code Execution Vulnerability
EPSS 2.4%
High 7.1
CVE-2022-34690 Windows Fax Service Elevation of Privilege Vulnerability
High 7.0
CVE-2022-33646 Azure Batch Node Agent Elevation of Privilege Vulnerability

Medium45 Show

Medium 6.5
CVE-2022-30134 Microsoft Exchange Server Information Disclosure Vulnerability
EPSS 2.1%
Medium 6.5
CVE-2022-35775 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.8%
Medium 6.5
CVE-2022-35780 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.8%
Medium 6.5
CVE-2022-35781 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.8%
Medium 6.5
CVE-2022-35782 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.8%
Medium 6.5
CVE-2022-35784 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35785 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35786 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35788 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35789 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35790 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35791 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35799 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35801 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35807 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35808 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35809 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35810 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35811 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35813 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35814 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35815 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35816 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35817 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35818 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.5
CVE-2022-35819 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2%
Medium 6.2
CVE-2022-35776 Azure Site Recovery Denial of Service Vulnerability
Medium 6.1
CVE-2022-35797 Windows Hello Security Feature Bypass Vulnerability
Medium 6.0
CVE-2022-34709 Windows Defender Credential Guard Security Feature Bypass Vulnerability
EPSS 1.2%
Medium 5.9
CVE-2022-34716 .NET Spoofing Vulnerability
EPSS 2.5%
Medium 5.5
CVE-2022-30197 Windows Kernel Information Disclosure Vulnerability
Medium 5.5
CVE-2022-34685 Azure RTOS GUIX Studio Information Disclosure Vulnerability
Medium 5.5
CVE-2022-34686 Azure RTOS GUIX Studio Information Disclosure Vulnerability
Medium 5.5
CVE-2022-34708 Windows Kernel Information Disclosure Vulnerability
EPSS 1.5%
Medium 5.5
CVE-2022-34710 Windows Defender Credential Guard Information Disclosure Vulnerability
EPSS 1.5%
Medium 5.5
CVE-2022-34712 Windows Defender Credential Guard Information Disclosure Vulnerability
EPSS 1.5%
Medium 5.3
CVE-2022-34692 Microsoft Exchange Server Information Disclosure Vulnerability
EPSS 1.8%
Medium 4.9
CVE-2022-35774 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.1%
Medium 4.9
CVE-2022-35787 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.2%
Medium 4.9
CVE-2022-35800 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.2%
Medium 4.9
CVE-2022-35812 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.2%
Medium 4.8
CVE-2022-21979 Microsoft Exchange Server Information Disclosure Vulnerability
EPSS 2.2%
Medium 4.7
CVE-2022-34704 Windows Defender Credential Guard Information Disclosure Vulnerability
EPSS 1.2%
Medium 4.4
CVE-2022-35783 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 1.7%
Medium 4.4
CVE-2022-35821 Azure Sphere Information Disclosure Vulnerability
EPSS 1.1%