# KB5015814: July 2022 cumulative update for Windows 11 21H2 KB5015814, released July 12, 2022, fixes 40 CVEs across 2 products. One of them is being exploited (CVE-2022-22047); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5015814 - Platform: Microsoft - Released: Jul 12, 2022 - Priority: Patch now (Closes CVE-2022-22047, exploited (CISA KEV)) - CVEs: 40, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://support.microsoft.com/help/5015814 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows 11 version 21H2 for ARM64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-21h2-for-arm64-based-systems.md) | | 22000.795 | | [Windows 11 version 21H2 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-11-version-21h2-for-x64-based-systems.md) | | 22000.795 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-22047](https://patchblox.com/security/data/cve/CVE-2022-22047.md) | Patch now | Windows Client/Server Runtime Subsystem | 7.8 | 0.1877 | CISA KEV | | [CVE-2022-30216](https://patchblox.com/security/data/cve/CVE-2022-30216.md) | Urgent | Windows Server Service | 8.8 | 0.8862 | More likely | | [CVE-2022-22034](https://patchblox.com/security/data/cve/CVE-2022-22034.md) | Urgent | Microsoft Graphics Component | 7.8 | 0.0625 | More likely | | [CVE-2022-30220](https://patchblox.com/security/data/cve/CVE-2022-30220.md) | Urgent | Windows Storage | 7.8 | 0.0520 | More likely | | [CVE-2022-30202](https://patchblox.com/security/data/cve/CVE-2022-30202.md) | Urgent | Windows Advanced Local Procedure Call | 7.0 | 0.0447 | More likely | | [CVE-2022-22038](https://patchblox.com/security/data/cve/CVE-2022-22038.md) | Urgent | Windows Remote Procedure Call Runtime | 8.1 | 0.0252 | | | [CVE-2022-30221](https://patchblox.com/security/data/cve/CVE-2022-30221.md) | Urgent | Microsoft Graphics Component | 8.8 | 0.0212 | | | [CVE-2022-22025](https://patchblox.com/security/data/cve/CVE-2022-22025.md) | High | Windows IIS | 7.5 | 0.3270 | | | [CVE-2022-27776](https://patchblox.com/security/data/cve/CVE-2022-27776.md) | High | Open Source Software | 8.1 | 0.0410 | | | [CVE-2022-30209](https://patchblox.com/security/data/cve/CVE-2022-30209.md) | High | Windows IIS | 7.4 | 0.0256 | | | [CVE-2022-22037](https://patchblox.com/security/data/cve/CVE-2022-22037.md) | High | Windows Advanced Local Procedure Call | 7.5 | 0.0250 | | | [CVE-2022-22027](https://patchblox.com/security/data/cve/CVE-2022-22027.md) | High | Role: Windows Fax Service | 7.8 | 0.0223 | | | [CVE-2022-30206](https://patchblox.com/security/data/cve/CVE-2022-30206.md) | High | Windows Print Spooler Components | 7.8 | 0.0222 | | | [CVE-2022-22024](https://patchblox.com/security/data/cve/CVE-2022-22024.md) | High | Role: Windows Fax Service | 7.8 | 0.0211 | | | [CVE-2022-30211](https://patchblox.com/security/data/cve/CVE-2022-30211.md) | High | Windows Point-to-Point Tunneling Protocol | 7.5 | 0.0207 | | | [CVE-2022-22040](https://patchblox.com/security/data/cve/CVE-2022-22040.md) | High | Windows IIS | 7.3 | 0.0150 | | | [CVE-2022-30203](https://patchblox.com/security/data/cve/CVE-2022-30203.md) | High | Windows Boot Manager | 7.4 | 0.0150 | | | [CVE-2022-22049](https://patchblox.com/security/data/cve/CVE-2022-22049.md) | High | Windows Client/Server Runtime Subsystem | 7.8 | 0.0106 | | | [CVE-2022-22026](https://patchblox.com/security/data/cve/CVE-2022-22026.md) | High | Windows Client/Server Runtime Subsystem | 8.8 | 0.0102 | | | [CVE-2022-22022](https://patchblox.com/security/data/cve/CVE-2022-22022.md) | High | Windows Print Spooler Components | 7.1 | 0.0078 | | | [CVE-2022-30226](https://patchblox.com/security/data/cve/CVE-2022-30226.md) | High | Windows Print Spooler Components | 7.1 | 0.0078 | | | [CVE-2022-30222](https://patchblox.com/security/data/cve/CVE-2022-30222.md) | High | Windows Shell | 8.4 | 0.0073 | | | [CVE-2022-22043](https://patchblox.com/security/data/cve/CVE-2022-22043.md) | High | Windows Fast FAT Driver | 7.8 | 0.0072 | | | [CVE-2022-22031](https://patchblox.com/security/data/cve/CVE-2022-22031.md) | High | Windows Credential Guard | 7.8 | 0.0071 | | | [CVE-2022-22050](https://patchblox.com/security/data/cve/CVE-2022-22050.md) | High | Windows Fax and Scan Service | 7.8 | 0.0063 | | | [CVE-2022-30225](https://patchblox.com/security/data/cve/CVE-2022-30225.md) | High | Windows Media | 7.1 | 0.0056 | | | [CVE-2022-22045](https://patchblox.com/security/data/cve/CVE-2022-22045.md) | High | Windows Media | 7.8 | 0.0055 | | | [CVE-2022-30224](https://patchblox.com/security/data/cve/CVE-2022-30224.md) | High | Windows Advanced Local Procedure Call | 7.0 | 0.0051 | | | [CVE-2022-22036](https://patchblox.com/security/data/cve/CVE-2022-22036.md) | High | Windows Performance Counters | 7.0 | 0.0051 | | | [CVE-2022-22041](https://patchblox.com/security/data/cve/CVE-2022-22041.md) | Routine | Windows Print Spooler Components | 6.8 | 0.0271 | | | [CVE-2022-22042](https://patchblox.com/security/data/cve/CVE-2022-22042.md) | Routine | Role: Windows Hyper-V | 6.5 | 0.0266 | | | [CVE-2022-30208](https://patchblox.com/security/data/cve/CVE-2022-30208.md) | Routine | Windows Security Account Manager | 6.5 | 0.0250 | | | [CVE-2022-30205](https://patchblox.com/security/data/cve/CVE-2022-30205.md) | Routine | Windows Group Policy | 6.6 | 0.0120 | | | [CVE-2022-30223](https://patchblox.com/security/data/cve/CVE-2022-30223.md) | Routine | Role: Windows Hyper-V | 5.7 | 0.0083 | | | [CVE-2022-22048](https://patchblox.com/security/data/cve/CVE-2022-22048.md) | Routine | Windows BitLocker | 6.1 | 0.0076 | | | [CVE-2022-30213](https://patchblox.com/security/data/cve/CVE-2022-30213.md) | Routine | Microsoft Graphics Component | 5.5 | 0.0073 | | | [CVE-2022-21845](https://patchblox.com/security/data/cve/CVE-2022-21845.md) | Routine | Windows Kernel | 4.7 | 0.0068 | | | [CVE-2022-22023](https://patchblox.com/security/data/cve/CVE-2022-22023.md) | Routine | Windows Portable Device Enumerator Service | 6.6 | 0.0060 | | | [CVE-2022-22711](https://patchblox.com/security/data/cve/CVE-2022-22711.md) | Routine | Windows BitLocker | 5.7 | 0.0051 | | | [CVE-2022-30212](https://patchblox.com/security/data/cve/CVE-2022-30212.md) | Routine | Windows Connected Devices Platform Service | 4.7 | 0.0046 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo