# KB5014678: June 2022 cumulative update for Windows Server 2022 KB5014678, released June 14, 2022, fixes 30 CVEs across 2 products. One of them is being exploited (CVE-2022-30190); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/microsoft/kb5014678 - Platform: Microsoft - Released: Jun 14, 2022 - Priority: Patch now (Closes CVE-2022-30190, exploited (CISA KEV, ransomware)) - CVEs: 30, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://support.microsoft.com/help/5014678 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows Server 2022](https://patchblox.com/security/data/product/microsoft/windows-server-2022.md) | | 20348.768 | | [Windows Server 2022 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2022-server-core-installation.md) | | 20348.768 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-30190](https://patchblox.com/security/data/cve/CVE-2022-30190.md) | Patch now | Microsoft Windows Support Diagnostic Tool (MSDT) | 7.8 | 0.9916 | CISA KEV, Ransomware, Disclosed | | [CVE-2022-30160](https://patchblox.com/security/data/cve/CVE-2022-30160.md) | Urgent | Windows ALPC | 7.8 | 0.0644 | More likely | | [CVE-2022-30147](https://patchblox.com/security/data/cve/CVE-2022-30147.md) | Urgent | Windows Installer | 7.8 | 0.0441 | More likely | | [CVE-2022-30139](https://patchblox.com/security/data/cve/CVE-2022-30139.md) | Urgent | Windows LDAP - Lightweight Directory Access Protocol | 7.5 | 0.0231 | | | [CVE-2022-30163](https://patchblox.com/security/data/cve/CVE-2022-30163.md) | Urgent | Role: Windows Hyper-V | 8.5 | 0.0181 | | | [CVE-2022-30165](https://patchblox.com/security/data/cve/CVE-2022-30165.md) | High | Windows Kerberos | 8.8 | 0.0509 | | | [CVE-2022-30150](https://patchblox.com/security/data/cve/CVE-2022-30150.md) | High | Windows Defender | 7.5 | 0.0356 | | | [CVE-2022-30152](https://patchblox.com/security/data/cve/CVE-2022-30152.md) | High | Windows Network Address Translation (NAT) | 7.5 | 0.0309 | | | [CVE-2022-30153](https://patchblox.com/security/data/cve/CVE-2022-30153.md) | High | Windows LDAP - Lightweight Directory Access Protocol | 8.8 | 0.0261 | | | [CVE-2022-30161](https://patchblox.com/security/data/cve/CVE-2022-30161.md) | High | Windows LDAP - Lightweight Directory Access Protocol | 8.8 | 0.0261 | | | [CVE-2022-30141](https://patchblox.com/security/data/cve/CVE-2022-30141.md) | High | Windows LDAP - Lightweight Directory Access Protocol | 8.1 | 0.0252 | | | [CVE-2022-30142](https://patchblox.com/security/data/cve/CVE-2022-30142.md) | High | Windows File History Service | 7.5 | 0.0238 | | | [CVE-2022-30145](https://patchblox.com/security/data/cve/CVE-2022-30145.md) | High | Windows Encrypting File System (EFS) | 7.5 | 0.0215 | | | [CVE-2022-30140](https://patchblox.com/security/data/cve/CVE-2022-30140.md) | High | Windows iSCSI | 7.5 | 0.0203 | | | [CVE-2022-30143](https://patchblox.com/security/data/cve/CVE-2022-30143.md) | High | Windows LDAP - Lightweight Directory Access Protocol | 7.5 | 0.0203 | | | [CVE-2022-30146](https://patchblox.com/security/data/cve/CVE-2022-30146.md) | High | Windows LDAP - Lightweight Directory Access Protocol | 7.5 | 0.0203 | | | [CVE-2022-30149](https://patchblox.com/security/data/cve/CVE-2022-30149.md) | High | Windows LDAP - Lightweight Directory Access Protocol | 7.5 | 0.0203 | | | [CVE-2022-30166](https://patchblox.com/security/data/cve/CVE-2022-30166.md) | High | Windows Local Security Authority Subsystem Service (LSASS) | 7.8 | 0.0144 | | | [CVE-2022-30164](https://patchblox.com/security/data/cve/CVE-2022-30164.md) | High | Windows Kerberos | 7.8 | 0.0119 | | | [CVE-2022-30131](https://patchblox.com/security/data/cve/CVE-2022-30131.md) | High | Windows Container Isolation FS Filter Driver | 7.8 | 0.0084 | | | [CVE-2022-30132](https://patchblox.com/security/data/cve/CVE-2022-30132.md) | High | Windows Container Manager Service | 7.8 | 0.0069 | | | [CVE-2022-30151](https://patchblox.com/security/data/cve/CVE-2022-30151.md) | High | Windows Ancillary Function Driver for WinSock | 7.0 | 0.0057 | | | [CVE-2022-21123](https://patchblox.com/security/data/cve/CVE-2022-21123.md) | Routine | Intel | 6.1 | 0.0687 | | | [CVE-2022-21125](https://patchblox.com/security/data/cve/CVE-2022-21125.md) | Routine | Intel | 6.1 | 0.0645 | | | [CVE-2022-21166](https://patchblox.com/security/data/cve/CVE-2022-21166.md) | Routine | Intel | 6.1 | 0.0645 | | | [CVE-2022-21127](https://patchblox.com/security/data/cve/CVE-2022-21127.md) | Routine | Intel | 5.5 | 0.0551 | | | [CVE-2022-30155](https://patchblox.com/security/data/cve/CVE-2022-30155.md) | Routine | Windows Kernel | 5.5 | 0.0533 | | | [CVE-2022-30154](https://patchblox.com/security/data/cve/CVE-2022-30154.md) | Routine | Remote Volume Shadow Copy Service (RVSS) | 5.3 | 0.0183 | | | [CVE-2022-30148](https://patchblox.com/security/data/cve/CVE-2022-30148.md) | Routine | Windows PowerShell | 5.5 | 0.0132 | | | [CVE-2022-30162](https://patchblox.com/security/data/cve/CVE-2022-30162.md) | Routine | Windows Kernel | 5.5 | 0.0085 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo