Microsoft · Security update · July 12, 2022

KB5015808: July 2022 cumulative update for Windows 10 1607

KB5015808, released July 12, 2022, fixes 42 CVEs across 4 products. One of them is being exploited (CVE-2022-22047); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV
CVEs closed
42
4 rated Critical
Exploited
1
CVE-2022-22047
Exploitation more likely
4
Microsoft's assessment
Highest EPSS
0.3270
98th percentile

Priority of the 42 CVEs

Patch now 1 Urgent 8 High 21 Routine 12

Applies to

ProductBuild after install
Windows 10 Version 1607 for 32-bit Systems14393.5246
Windows 10 Version 1607 for x64-based Systems14393.5246
Windows Server 201614393.5246
Windows Server 2016 (Server Core installation)14393.5246

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2022-22047 Windows Client/Server Runtime SubsystemElevation of Privilege7.8 0.1877 KEVExploited
Urgent CVE-2022-22034 Microsoft Graphics ComponentElevation of Privilege7.8 0.0625 More likely
Urgent CVE-2022-22029 Windows Network File SystemRemote Code Execution8.1 0.0522 Exploitation Less Likely
Urgent CVE-2022-30220 Windows StorageElevation of Privilege7.8 0.0520 More likely
Urgent CVE-2022-30202 Windows Advanced Local Procedure CallElevation of Privilege7.0 0.0447 More likely
Urgent CVE-2022-22038 Windows Remote Procedure Call RuntimeRemote Code Execution8.1 0.0252 Exploitation Less Likely
Urgent CVE-2022-22039 Windows Network File SystemRemote Code Execution7.5 0.0232 Exploitation Less Likely
Urgent CVE-2022-30221 Microsoft Graphics ComponentRemote Code Execution8.8 0.0212 Exploitation Less Likely
Urgent CVE-2022-30215 Windows Active DirectoryElevation of Privilege7.5 0.0187 More likely
High CVE-2022-22025 Windows IISDenial of Service7.5 0.3270 Exploitation Less Likely
High CVE-2022-30209 Windows IISElevation of Privilege7.4 0.0256 Exploitation Less Likely
High CVE-2022-22037 Windows Advanced Local Procedure CallElevation of Privilege7.5 0.0250 Exploitation Less Likely
High CVE-2022-22027 Role: Windows Fax ServiceRemote Code Execution7.8 0.0223 Exploitation Less Likely
High CVE-2022-30206 Windows Print Spooler ComponentsElevation of Privilege7.8 0.0222 Exploitation Less Likely
High CVE-2022-22024 Role: Windows Fax ServiceRemote Code Execution7.8 0.0211 Exploitation Less Likely
High CVE-2022-30211 Windows Point-to-Point Tunneling ProtocolRemote Code Execution7.5 0.0207 Exploitation Less Likely
High CVE-2022-22040 Windows IISDenial of Service7.3 0.0150 Exploitation Less Likely
High CVE-2022-30203 Windows Boot ManagerSecurity Feature Bypass7.4 0.0150 Exploitation Less Likely
High CVE-2022-22049 Windows Client/Server Runtime SubsystemElevation of Privilege7.8 0.0106 Exploitation Less Likely
High CVE-2022-22026 Windows Client/Server Runtime SubsystemElevation of Privilege8.8 0.0102 Exploitation Less Likely
High CVE-2022-22022 Windows Print Spooler ComponentsElevation of Privilege7.1 0.0078 Exploitation Less Likely
High CVE-2022-30226 Windows Print Spooler ComponentsElevation of Privilege7.1 0.0078 Exploitation Less Likely
High CVE-2022-30222 Windows ShellRemote Code Execution8.4 0.0073 Exploitation Less Likely
High CVE-2022-22043 Windows Fast FAT DriverDenial of Service7.8 0.0072 Exploitation Less Likely
High CVE-2022-22031 Windows Credential GuardElevation of Privilege7.8 0.0071 Exploitation Less Likely
Showing 1 to 25 of 42 1Next

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.