# KB5016676: August 2022 security update KB5016676, released August 9, 2022, fixes 30 CVEs across 4 products. One of them is being exploited (CVE-2022-34713); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5016676 - Platform: Microsoft - Released: Aug 9, 2022 - Priority: Patch now (Closes CVE-2022-34713, exploited (CISA KEV)) - CVEs: 30, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://support.microsoft.com/help/5016676 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Windows 7 for 32-bit Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-7-for-32-bit-systems-service-pack-1.md) | | | | [Windows 7 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-7-for-x64-based-systems-service-pack-1.md) | | | | [Windows Server 2008 R2 for x64-based Systems Service Pack 1](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1.md) | | | | [Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)](https://patchblox.com/security/data/product/microsoft/windows-server-2008-r2-for-x64-based-systems-service-pack-1-server-core-installation.md) | | | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-34713](https://patchblox.com/security/data/cve/CVE-2022-34713.md) | Patch now | Microsoft Windows Support Diagnostic Tool (MSDT) | 7.8 | 0.6776 | CISA KEV, Disclosed | | [CVE-2022-34689](https://patchblox.com/security/data/cve/CVE-2022-34689.md) | Urgent | Windows CryptoAPI | 7.5 | 0.3814 | More likely | | [CVE-2022-35756](https://patchblox.com/security/data/cve/CVE-2022-35756.md) | Urgent | Windows Kerberos | 7.8 | 0.1131 | More likely | | [CVE-2022-35793](https://patchblox.com/security/data/cve/CVE-2022-35793.md) | Urgent | Windows Print Spooler Components | 7.3 | 0.0936 | More likely | | [CVE-2022-35750](https://patchblox.com/security/data/cve/CVE-2022-35750.md) | Urgent | Windows Canonical Display Driver | 7.8 | 0.0648 | More likely | | [CVE-2022-35751](https://patchblox.com/security/data/cve/CVE-2022-35751.md) | Urgent | Role: Windows Hyper-V | 7.8 | 0.0546 | More likely | | [CVE-2022-30133](https://patchblox.com/security/data/cve/CVE-2022-30133.md) | Urgent | Windows Point-to-Point Tunneling Protocol | 9.8 | 0.0281 | | | [CVE-2022-34691](https://patchblox.com/security/data/cve/CVE-2022-34691.md) | Urgent | Active Directory Domain Services | 8.8 | 0.0237 | | | [CVE-2022-34714](https://patchblox.com/security/data/cve/CVE-2022-34714.md) | Urgent | Windows Secure Socket Tunneling Protocol (SSTP) | 8.1 | 0.0201 | | | [CVE-2022-35744](https://patchblox.com/security/data/cve/CVE-2022-35744.md) | Urgent | Windows Point-to-Point Tunneling Protocol | 9.8 | 0.0198 | | | [CVE-2022-35767](https://patchblox.com/security/data/cve/CVE-2022-35767.md) | Urgent | Windows Secure Socket Tunneling Protocol (SSTP) | 8.1 | 0.0181 | | | [CVE-2022-35743](https://patchblox.com/security/data/cve/CVE-2022-35743.md) | Urgent | Microsoft Windows Support Diagnostic Tool (MSDT) | 7.8 | 0.0145 | More likely | | [CVE-2022-34702](https://patchblox.com/security/data/cve/CVE-2022-34702.md) | Urgent | Windows Secure Socket Tunneling Protocol (SSTP) | 8.1 | 0.0131 | | | [CVE-2022-35745](https://patchblox.com/security/data/cve/CVE-2022-35745.md) | Urgent | Windows Secure Socket Tunneling Protocol (SSTP) | 8.1 | 0.0123 | | | [CVE-2022-35752](https://patchblox.com/security/data/cve/CVE-2022-35752.md) | Urgent | Remote Access Service Point-to-Point Tunneling Protocol | 8.1 | 0.0123 | | | [CVE-2022-35753](https://patchblox.com/security/data/cve/CVE-2022-35753.md) | Urgent | Remote Access Service Point-to-Point Tunneling Protocol | 8.1 | 0.0123 | | | [CVE-2022-35820](https://patchblox.com/security/data/cve/CVE-2022-35820.md) | Urgent | Microsoft Bluetooth Driver | 7.8 | 0.0056 | More likely | | [CVE-2022-34701](https://patchblox.com/security/data/cve/CVE-2022-34701.md) | High | Windows Secure Socket Tunneling Protocol (SSTP) | 7.5 | 0.0294 | | | [CVE-2022-35769](https://patchblox.com/security/data/cve/CVE-2022-35769.md) | High | Remote Access Service Point-to-Point Tunneling Protocol | 7.5 | 0.0250 | | | [CVE-2022-30194](https://patchblox.com/security/data/cve/CVE-2022-30194.md) | High | Windows WebBrowser Control | 7.5 | 0.0153 | | | [CVE-2022-34707](https://patchblox.com/security/data/cve/CVE-2022-34707.md) | High | Windows Kernel | 7.8 | 0.0134 | | | [CVE-2022-35768](https://patchblox.com/security/data/cve/CVE-2022-35768.md) | High | Windows Kernel | 7.8 | 0.0109 | | | [CVE-2022-35760](https://patchblox.com/security/data/cve/CVE-2022-35760.md) | High | Microsoft ATA Port Driver | 7.8 | 0.0077 | | | [CVE-2022-35795](https://patchblox.com/security/data/cve/CVE-2022-35795.md) | High | Windows Error Reporting | 7.8 | 0.0066 | | | [CVE-2022-34690](https://patchblox.com/security/data/cve/CVE-2022-34690.md) | High | Role: Windows Fax Service | 7.1 | 0.0061 | | | [CVE-2022-34706](https://patchblox.com/security/data/cve/CVE-2022-34706.md) | High | Windows Local Security Authority (LSA) | 7.8 | 0.0045 | | | [CVE-2022-35759](https://patchblox.com/security/data/cve/CVE-2022-35759.md) | Routine | Windows Local Security Authority (LSA) | 6.5 | 0.0170 | | | [CVE-2022-35747](https://patchblox.com/security/data/cve/CVE-2022-35747.md) | Routine | Windows Point-to-Point Tunneling Protocol | 5.9 | 0.0168 | | | [CVE-2022-34708](https://patchblox.com/security/data/cve/CVE-2022-34708.md) | Routine | Windows Kernel | 5.5 | 0.0154 | | | [CVE-2022-35758](https://patchblox.com/security/data/cve/CVE-2022-35758.md) | Routine | Windows Kernel | 5.5 | 0.0050 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo