Microsoft · Security update · February 8, 2022
KB5010395: February 2022 security update
KB5010395, released February 8, 2022, fixes 14 CVEs across 4 products. 2 of them are being exploited (CVE-2022-21999); 2 on CISA KEV. Patch Radar priority: Patch now.
Patch now2 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
14
None rated Critical
Exploited
2
CVE-2022-21999
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.4362
98th percentile
Priority of the 14 CVEs
Patch now 2
Urgent 3
High 4
Routine 5
Applies to
| Product |
|---|
| Windows 8.1 for 32-bit systems |
| Windows 8.1 for x64-based systems |
| Windows Server 2012 R2 |
| Windows Server 2012 R2 (Server Core installation) |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2022-21999 | Windows Print Spooler Components | Elevation of Privilege | 7.8 | 0.4101 | KEVRansomwareExploited |
| Patch now | CVE-2022-22718 | Windows Print Spooler Components | Elevation of Privilege | 7.8 | 0.1846 | KEVExploited |
| Urgent | CVE-2022-22000 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0433 | More likely |
| Urgent | CVE-2022-21989 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0319 | DisclosedMore likely |
| Urgent | CVE-2022-21981 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.0057 | More likely |
| High | CVE-2022-21993 | Windows Kernel-Mode Drivers | Information Disclosure | 7.5 | 0.4362 | Exploitation Less Likely |
| High | CVE-2022-21997 | Windows Print Spooler Components | Elevation of Privilege | 7.1 | 0.0080 | Exploitation Less Likely |
| High | CVE-2022-22717 | Windows Print Spooler Components | Elevation of Privilege | 7.0 | 0.0071 | Exploitation Less Likely |
| High | CVE-2022-22001 | Windows Remote Access Connection Manager | Elevation of Privilege | 7.8 | 0.0064 | Exploitation Less Likely |
| Routine | CVE-2021-34500 | Windows Kernel | Information Disclosure | 6.3 | 0.0266 | Exploitation Less Likely |
| Routine | CVE-2022-22002 | Windows User Account Profile | Denial of Service | 5.5 | 0.0128 | Exploitation Less Likely |
| Routine | CVE-2022-22710 | Windows Common Log File System Driver | Denial of Service | 5.5 | 0.0089 | Exploitation Less Likely |
| Routine | CVE-2022-21998 | Windows Common Log File System Driver | Information Disclosure | 5.5 | 0.0084 | Exploitation Less Likely |
| Routine | CVE-2022-21985 | Windows Remote Access Connection Manager | Information Disclosure | 5.5 | 0.0079 | Exploitation Less Likely |
Showing 1 to 14 of 14
1