Microsoft · Security update · February 8, 2022

KB5010422: February 2022 security update

KB5010422, released February 8, 2022, fixes 11 CVEs across 4 products. 2 of them are being exploited (CVE-2022-21999); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware use1 publicly disclosedUnsupported product
CVEs closed
11
None rated Critical
Exploited
2
CVE-2022-21999
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.4101
98th percentile

Priority of the 11 CVEs

Patch now 2 Urgent 3 High 2 Routine 4

Applies to

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2022-21999 Windows Print Spooler Components Elevation of Privilege 7.8 0.4101 KEVRansomwareExploited
Patch now CVE-2022-22718 Windows Print Spooler Components Elevation of Privilege 7.8 0.1846 KEVExploited
Urgent CVE-2022-22000 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0433 More likely
Urgent CVE-2022-21989 Windows Kernel Elevation of Privilege 7.8 0.0319 DisclosedMore likely
Urgent CVE-2022-21981 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0057 More likely
High CVE-2022-21997 Windows Print Spooler Components Elevation of Privilege 7.1 0.0080 Exploitation Less Likely
High CVE-2022-22717 Windows Print Spooler Components Elevation of Privilege 7.0 0.0071 Exploitation Less Likely
Routine CVE-2021-34500 Windows Kernel Information Disclosure 6.3 0.0266 Exploitation Less Likely
Routine CVE-2022-22710 Windows Common Log File System Driver Denial of Service 5.5 0.0089 Exploitation Less Likely
Routine CVE-2022-21998 Windows Common Log File System Driver Information Disclosure 5.5 0.0084 Exploitation Less Likely
Routine CVE-2022-21985 Windows Remote Access Connection Manager Information Disclosure 5.5 0.0079 Exploitation Less Likely
Showing 1 to 11 of 11 1