# KB5017327: September 2022 cumulative update for Windows 10 1507 KB5017327, released September 13, 2022, fixes 35 CVEs across 4 products. One of them is being exploited (CVE-2022-37969); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported. - Web page: https://patchblox.com/security/fix/microsoft/kb5017327 - Platform: Microsoft - Released: Sep 13, 2022 - Priority: Patch now (Closes CVE-2022-37969, exploited (CISA KEV, ransomware)) - CVEs: 35, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://support.microsoft.com/help/5017327 ## Applies to | Product | Release | Fixed in | |---|---|---| | [Microsoft .NET Framework 3.5 AND 4.6/4.6.2 on Windows 10 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-3.5-and-4.6-4.6.2-on-windows-10-for-32-bit-systems.md) | | 10240.19444 | | [Microsoft .NET Framework 3.5 AND 4.6/4.6.2 on Windows 10 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/microsoft-.net-framework-3.5-and-4.6-4.6.2-on-windows-10-for-x64-based-systems.md) | | 10240.19444 | | [Windows 10 for 32-bit Systems](https://patchblox.com/security/data/product/microsoft/windows-10-for-32-bit-systems.md) | | 10240.19444 | | [Windows 10 for x64-based Systems](https://patchblox.com/security/data/product/microsoft/windows-10-for-x64-based-systems.md) | | 10240.19444 | ## CVEs this fix closes | CVE | Priority | Component | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-37969](https://patchblox.com/security/data/cve/CVE-2022-37969.md) | Patch now | Windows Common Log File System Driver | 7.8 | 0.2848 | CISA KEV, Ransomware, Disclosed | | [CVE-2022-37958](https://patchblox.com/security/data/cve/CVE-2022-37958.md) | Urgent | Windows SPNEGO Extended Negotiation | 8.1 | 0.8603 | | | [CVE-2022-34721](https://patchblox.com/security/data/cve/CVE-2022-34721.md) | Urgent | Windows IKE Extension | 9.8 | 0.7624 | | | [CVE-2022-34718](https://patchblox.com/security/data/cve/CVE-2022-34718.md) | Urgent | Windows TCP/IP | 9.8 | 0.5470 | More likely | | [CVE-2022-35803](https://patchblox.com/security/data/cve/CVE-2022-35803.md) | Urgent | Windows Common Log File System Driver | 7.8 | 0.2382 | More likely | | [CVE-2022-34729](https://patchblox.com/security/data/cve/CVE-2022-34729.md) | Urgent | Microsoft Graphics Component | 7.8 | 0.1053 | More likely | | [CVE-2022-34725](https://patchblox.com/security/data/cve/CVE-2022-34725.md) | Urgent | Windows ALPC | 7.0 | 0.0538 | More likely | | [CVE-2022-34722](https://patchblox.com/security/data/cve/CVE-2022-34722.md) | Urgent | Windows IKE Extension | 9.8 | 0.0280 | | | [CVE-2022-34720](https://patchblox.com/security/data/cve/CVE-2022-34720.md) | High | Windows IKE Extension | 7.5 | 0.0363 | | | [CVE-2022-35841](https://patchblox.com/security/data/cve/CVE-2022-35841.md) | High | Windows Enterprise App Management | 8.8 | 0.0360 | | | [CVE-2022-35833](https://patchblox.com/security/data/cve/CVE-2022-35833.md) | High | Windows Transport Security Layer (TLS) | 7.5 | 0.0301 | | | [CVE-2022-34726](https://patchblox.com/security/data/cve/CVE-2022-34726.md) | High | Windows ODBC Driver | 8.8 | 0.0270 | | | [CVE-2022-34727](https://patchblox.com/security/data/cve/CVE-2022-34727.md) | High | Windows ODBC Driver | 8.8 | 0.0270 | | | [CVE-2022-34730](https://patchblox.com/security/data/cve/CVE-2022-34730.md) | High | Windows ODBC Driver | 8.8 | 0.0270 | | | [CVE-2022-34732](https://patchblox.com/security/data/cve/CVE-2022-34732.md) | High | Windows ODBC Driver | 8.8 | 0.0270 | | | [CVE-2022-34734](https://patchblox.com/security/data/cve/CVE-2022-34734.md) | High | Windows ODBC Driver | 8.8 | 0.0270 | | | [CVE-2022-34731](https://patchblox.com/security/data/cve/CVE-2022-34731.md) | High | Windows OLE DB | 8.8 | 0.0220 | | | [CVE-2022-34733](https://patchblox.com/security/data/cve/CVE-2022-34733.md) | High | Windows OLE DB | 8.8 | 0.0220 | | | [CVE-2022-35834](https://patchblox.com/security/data/cve/CVE-2022-35834.md) | High | Windows OLE DB | 8.8 | 0.0220 | | | [CVE-2022-35835](https://patchblox.com/security/data/cve/CVE-2022-35835.md) | High | Windows OLE DB | 8.8 | 0.0220 | | | [CVE-2022-35836](https://patchblox.com/security/data/cve/CVE-2022-35836.md) | High | Windows OLE DB | 8.8 | 0.0220 | | | [CVE-2022-35840](https://patchblox.com/security/data/cve/CVE-2022-35840.md) | High | Windows OLE DB | 8.8 | 0.0220 | | | [CVE-2022-37955](https://patchblox.com/security/data/cve/CVE-2022-37955.md) | High | Windows Group Policy | 7.8 | 0.0213 | | | [CVE-2022-30170](https://patchblox.com/security/data/cve/CVE-2022-30170.md) | High | Windows Credential Roaming Service | 7.3 | 0.0163 | | | [CVE-2022-26929](https://patchblox.com/security/data/cve/CVE-2022-26929.md) | High | .NET Framework | 7.8 | 0.0157 | | | [CVE-2022-37956](https://patchblox.com/security/data/cve/CVE-2022-37956.md) | High | Windows Kernel | 7.8 | 0.0134 | | | [CVE-2022-30200](https://patchblox.com/security/data/cve/CVE-2022-30200.md) | High | Windows LDAP - Lightweight Directory Access Protocol | 7.8 | 0.0130 | | | [CVE-2022-38004](https://patchblox.com/security/data/cve/CVE-2022-38004.md) | High | Role: Windows Fax Service | 7.8 | 0.0114 | | | [CVE-2022-34719](https://patchblox.com/security/data/cve/CVE-2022-34719.md) | High | Windows Distributed File System (DFS) | 7.8 | 0.0106 | | | [CVE-2022-38005](https://patchblox.com/security/data/cve/CVE-2022-38005.md) | High | Windows Print Spooler Components | 7.8 | 0.0085 | | | [CVE-2022-34728](https://patchblox.com/security/data/cve/CVE-2022-34728.md) | Routine | Microsoft Graphics Component | 5.5 | 0.0433 | | | [CVE-2022-35837](https://patchblox.com/security/data/cve/CVE-2022-35837.md) | Routine | Microsoft Graphics Component | 6.5 | 0.0250 | | | [CVE-2022-38006](https://patchblox.com/security/data/cve/CVE-2022-38006.md) | Routine | Microsoft Graphics Component | 6.5 | 0.0230 | | | [CVE-2022-35832](https://patchblox.com/security/data/cve/CVE-2022-35832.md) | Routine | Windows Event Tracing | 5.5 | 0.0092 | | | [CVE-2022-35831](https://patchblox.com/security/data/cve/CVE-2022-35831.md) | Routine | Windows Remote Access Connection Manager | 5.5 | 0.0085 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo