Microsoft · Security update · April 12, 2022

KB5012626: April 2022 security update

KB5012626, released April 12, 2022, fixes 50 CVEs across 4 products. 2 of them are being exploited (CVE-2022-26904); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware use1 publicly disclosedUnsupported product

CVEs closed

4 rated Critical

Exploited

CVE-2022-26904

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.9086

99th percentile

Priority of the 50 CVEs

Patch now 2
                                Urgent 7
                                High 34
                                Routine 7

Applies to

Product
Windows 7 for 32-bit Systems Service Pack 1
Windows 7 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2022-26904	Windows User Profile Service	Elevation of Privilege	7.0	0.1695	KEVDisclosedExploited
Patch now	CVE-2022-24521	Windows Common Log File System Driver	Elevation of Privilege	7.8	0.0713	KEVRansomwareExploited
Urgent	CVE-2022-26809	Windows Remote Procedure Call Runtime	Remote Code Execution	9.8	0.9086	More likely
Urgent	CVE-2022-24500	Windows SMB	Remote Code Execution	8.8	0.3805	Exploitation Less Likely
Urgent	CVE-2022-24481	Windows Common Log File System Driver	Elevation of Privilege	7.8	0.1678	More likely
Urgent	CVE-2022-24542	Windows Win32K	Elevation of Privilege	7.8	0.0915	More likely
Urgent	CVE-2022-24474	Windows Win32K	Elevation of Privilege	7.8	0.0651	More likely
Urgent	CVE-2022-24541	Windows SMB	Remote Code Execution	8.8	0.0305	Exploitation Less Likely
Urgent	CVE-2022-26919	Windows LDAP - Lightweight Directory Access Protocol	Remote Code Execution	8.1	0.0257	Exploitation Less Likely
High	CVE-2022-24533	Windows RDP	Remote Code Execution	8.0	0.0560	Exploitation Less Likely
High	CVE-2022-24536	Role: DNS Server	Remote Code Execution	7.2	0.0384	Exploitation Less Likely
High	CVE-2022-26812	Role: DNS Server	Remote Code Execution	7.2	0.0384	Exploitation Less Likely
High	CVE-2022-26813	Role: DNS Server	Remote Code Execution	7.2	0.0384	Exploitation Less Likely
High	CVE-2022-26815	Role: DNS Server	Remote Code Execution	7.2	0.0384	Exploitation Less Likely
High	CVE-2022-26915	Windows SChannel	Denial of Service	7.5	0.0356	Exploitation Less Likely
High	CVE-2022-26831	Windows LDAP - Lightweight Directory Access Protocol	Denial of Service	7.5	0.0327	Exploitation Less Likely
High	CVE-2022-24492	Windows Remote Procedure Call Runtime	Remote Code Execution	8.8	0.0309	Exploitation Less Likely
High	CVE-2022-26903	Microsoft Graphics Component	Remote Code Execution	7.8	0.0266	Exploitation Less Likely
High	CVE-2022-24528	Windows Remote Procedure Call Runtime	Remote Code Execution	8.8	0.0258	Exploitation Less Likely
High	CVE-2022-26916	Windows Fax Compose Form	Remote Code Execution	7.8	0.0206	Exploitation Less Likely
High	CVE-2022-26917	Windows Fax Compose Form	Remote Code Execution	7.8	0.0206	Exploitation Less Likely
High	CVE-2022-26918	Windows Fax Compose Form	Remote Code Execution	7.8	0.0206	Exploitation Less Likely
High	CVE-2022-21983	Windows kernel32.dll	Remote Code Execution	7.5	0.0205	Exploitation Less Likely
High	CVE-2022-24494	Windows Ancillary Function Driver for WinSock	Elevation of Privilege	7.8	0.0191	Exploitation Less Likely
High	CVE-2022-24534	Windows kernel32.dll	Remote Code Execution	7.5	0.0190	Exploitation Less Likely

Released the same day

KB5002143
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5002148
Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1 (32-bit editions), Microsoft Office 2013 Service Pack 1 (64-bit editions)
KB5002162
Microsoft Office Online Server
KB5002169
Microsoft Office Web Apps Server 2013 Service Pack 1
KB5002175
Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2013 Service Pack 1 (32-bit editions), Microsoft Excel 2013 Service Pack 1 (64-bit editions)
KB5002177
Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)
KB5002180
Microsoft SharePoint Server 2019
KB5002183
Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2016
KB5002189
Microsoft SharePoint Foundation 2013 Service Pack 1
KB5002191
Microsoft SharePoint Server Subscription Edition
KB5012591
Windows 10 Version 1909 for 32-bit Systems, Windows 10 Version 1909 for ARM64-based Systems, Windows 10 Version 1909 for x64-based Systems
KB5012592
Windows 11 version 21H2 for ARM64-based Systems, Windows 11 version 21H2 for x64-based Systems

Vendor advisory

https://support.microsoft.com/help/5012626

For tools and AI agents

This page as data: JSON · Markdown

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.