Microsoft · Security update · June 14, 2022
KB5014748: June 2022 security update
KB5014748, released June 14, 2022, fixes 22 CVEs across 4 products. One of them is being exploited (CVE-2022-30190); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVKnown ransomware use1 publicly disclosedUnsupported product
CVEs closed
22
1 rated Critical
Exploited
1
CVE-2022-30190
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.9916
99th percentile
Priority of the 22 CVEs
Patch now 1
Urgent 3
High 12
Routine 6
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2022-30190 | Microsoft Windows Support Diagnostic Tool (MSDT) | Remote Code Execution | 7.8 | 0.9916 | KEVRansomwareDisclosedExploited |
| Urgent | CVE-2022-30160 | Windows ALPC | Elevation of Privilege | 7.8 | 0.0644 | More likely |
| Urgent | CVE-2022-30147 | Windows Installer | Elevation of Privilege | 7.8 | 0.0441 | More likely |
| Urgent | CVE-2022-30163 | Role: Windows Hyper-V | Remote Code Execution | 8.5 | 0.0181 | Exploitation Less Likely |
| High | CVE-2022-30152 | Windows Network Address Translation (NAT) | Denial of Service | 7.5 | 0.0309 | Exploitation Less Likely |
| High | CVE-2022-30153 | Windows LDAP - Lightweight Directory Access Protocol | Remote Code Execution | 8.8 | 0.0261 | Exploitation Less Likely |
| High | CVE-2022-30161 | Windows LDAP - Lightweight Directory Access Protocol | Remote Code Execution | 8.8 | 0.0261 | Exploitation Less Likely |
| High | CVE-2022-30141 | Windows LDAP - Lightweight Directory Access Protocol | Remote Code Execution | 8.1 | 0.0252 | Exploitation Less Likely |
| High | CVE-2022-30142 | Windows File History Service | Remote Code Execution | 7.5 | 0.0238 | Exploitation Less Likely |
| High | CVE-2022-30140 | Windows iSCSI | Remote Code Execution | 7.5 | 0.0203 | Exploitation Less Likely |
| High | CVE-2022-30143 | Windows LDAP - Lightweight Directory Access Protocol | Remote Code Execution | 7.5 | 0.0203 | Exploitation Less Likely |
| High | CVE-2022-30146 | Windows LDAP - Lightweight Directory Access Protocol | Remote Code Execution | 7.5 | 0.0203 | Exploitation Less Likely |
| High | CVE-2022-30149 | Windows LDAP - Lightweight Directory Access Protocol | Remote Code Execution | 7.5 | 0.0203 | Exploitation Less Likely |
| High | CVE-2022-30166 | Windows Local Security Authority Subsystem Service (LSASS) | Elevation of Privilege | 7.8 | 0.0144 | Exploitation Less Likely |
| High | CVE-2022-30135 | Windows Media | Elevation of Privilege | 7.8 | 0.0082 | Exploitation Less Likely |
| High | CVE-2022-30151 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.0 | 0.0057 | Exploitation Less Likely |
| Routine | CVE-2021-26414 | Windows DCOM Server | Security Feature Bypass | 4.8 | 0.4984 | Exploitation Less Likely |
| Routine | CVE-2022-21123 | Intel | Information Disclosure | 6.1 | 0.0687 | Exploitation Less Likely |
| Routine | CVE-2022-21125 | Intel | Information Disclosure | 5.5 | 0.0645 | Exploitation Less Likely |
| Routine | CVE-2022-21166 | Intel | Information Disclosure | 5.5 | 0.0645 | Exploitation Less Likely |
| Routine | CVE-2022-21127 | Intel | Information Disclosure | 5.5 | 0.0551 | Exploitation Less Likely |
| Routine | CVE-2022-30155 | Windows Kernel | Denial of Service | 5.5 | 0.0533 | Exploitation Less Likely |
Showing 1 to 22 of 22
1