Microsoft · Security update · February 8, 2022

KB5010354: February 2022 cumulative update for Windows Server 2022

KB5010354, released February 8, 2022, fixes 21 CVEs across 2 products. 3 of them are being exploited (CVE-2022-21971); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
21
None rated Critical
Exploited
3
CVE-2022-21971
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.5393
99th percentile

Priority of the 21 CVEs

Patch now 3 Urgent 5 High 8 Routine 5

Applies to

ProductBuild after install
Windows Server 202220348.524
Windows Server 2022 (Server Core installation)20348.524

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2022-21971 Windows Remote Procedure Call Runtime Remote Code Execution 7.8 0.5393 KEVExploited
Patch now CVE-2022-21999 Windows Print Spooler Components Elevation of Privilege 7.8 0.4101 KEVRansomwareExploited
Patch now CVE-2022-22718 Windows Print Spooler Components Elevation of Privilege 7.8 0.1846 KEVExploited
Urgent CVE-2022-22715 Windows Named Pipe File System Elevation of Privilege 7.8 0.1351 More likely
Urgent CVE-2022-22000 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0433 More likely
Urgent CVE-2022-21994 Windows DWM Core Library Elevation of Privilege 7.8 0.0420 More likely
Urgent CVE-2022-21989 Windows Kernel Elevation of Privilege 7.8 0.0319 DisclosedMore likely
Urgent CVE-2022-21981 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0057 More likely
High CVE-2022-21993 Windows Kernel-Mode Drivers Information Disclosure 7.5 0.4362 Exploitation Less Likely
High CVE-2022-21974 Roaming Security Rights Management Services Remote Code Execution 7.8 0.0501 Exploitation Less Likely
High CVE-2022-21984 Role: DNS Server Remote Code Execution 8.8 0.0480 Exploitation Less Likely
High CVE-2022-21992 Windows Kernel Remote Code Execution 7.8 0.0250 Exploitation Less Likely
High CVE-2022-21995 Role: Windows Hyper-V Remote Code Execution 7.9 0.0097 Exploitation Less Likely
High CVE-2022-21997 Windows Print Spooler Components Elevation of Privilege 7.1 0.0080 Exploitation Less Likely
High CVE-2022-22717 Windows Print Spooler Components Elevation of Privilege 7.0 0.0071 Exploitation Less Likely
High CVE-2022-22001 Windows Remote Access Connection Manager Elevation of Privilege 7.8 0.0064 Exploitation Less Likely
Routine CVE-2022-22002 Windows User Account Profile Denial of Service 5.5 0.0128 Exploitation Less Likely
Routine CVE-2022-22710 Windows Common Log File System Driver Denial of Service 5.5 0.0089 Exploitation Less Likely
Routine CVE-2022-21998 Windows Common Log File System Driver Information Disclosure 5.5 0.0084 Exploitation Less Likely
Routine CVE-2022-22712 Role: Windows Hyper-V Denial of Service 5.6 0.0080 Exploitation Less Likely
Routine CVE-2022-21985 Windows Remote Access Connection Manager Information Disclosure 5.5 0.0079 Exploitation Less Likely
Showing 1 to 21 of 21 1