Microsoft · Security update · July 12, 2022

KB5015814: July 2022 cumulative update for Windows 11 21H2

KB5015814, released July 12, 2022, fixes 40 CVEs across 2 products. One of them is being exploited (CVE-2022-22047); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product
CVEs closed
40
2 rated Critical
Exploited
1
CVE-2022-22047
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.8862
99th percentile

Priority of the 40 CVEs

Patch now 1 Urgent 6 High 22 Routine 11

Applies to

ProductBuild after install
Windows 11 version 21H2 for ARM64-based Systems22000.795
Windows 11 version 21H2 for x64-based Systems22000.795

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2022-22047 Windows Client/Server Runtime Subsystem Elevation of Privilege 7.8 0.1877 KEVExploited
Urgent CVE-2022-30216 Windows Server Service Tampering 8.8 0.8862 More likely
Urgent CVE-2022-22034 Microsoft Graphics Component Elevation of Privilege 7.8 0.0625 More likely
Urgent CVE-2022-30220 Windows Storage Elevation of Privilege 7.8 0.0520 More likely
Urgent CVE-2022-30202 Windows Advanced Local Procedure Call Elevation of Privilege 7.0 0.0447 More likely
Urgent CVE-2022-22038 Windows Remote Procedure Call Runtime Remote Code Execution 8.1 0.0252 Exploitation Less Likely
Urgent CVE-2022-30221 Microsoft Graphics Component Remote Code Execution 8.8 0.0212 Exploitation Less Likely
High CVE-2022-22025 Windows IIS Denial of Service 7.5 0.3270 Exploitation Less Likely
High CVE-2022-27776 Open Source Software Information Disclosure 8.1 0.0410 Exploitation Less Likely
High CVE-2022-30209 Windows IIS Elevation of Privilege 7.4 0.0256 Exploitation Less Likely
High CVE-2022-22037 Windows Advanced Local Procedure Call Elevation of Privilege 7.5 0.0250 Exploitation Less Likely
High CVE-2022-22027 Role: Windows Fax Service Remote Code Execution 7.8 0.0223 Exploitation Less Likely
High CVE-2022-30206 Windows Print Spooler Components Elevation of Privilege 7.8 0.0222 Exploitation Less Likely
High CVE-2022-22024 Role: Windows Fax Service Remote Code Execution 7.8 0.0211 Exploitation Less Likely
High CVE-2022-30211 Windows Point-to-Point Tunneling Protocol Remote Code Execution 7.5 0.0207 Exploitation Less Likely
High CVE-2022-22040 Windows IIS Denial of Service 7.3 0.0150 Exploitation Less Likely
High CVE-2022-30203 Windows Boot Manager Security Feature Bypass 7.4 0.0150 Exploitation Less Likely
High CVE-2022-22049 Windows Client/Server Runtime Subsystem Elevation of Privilege 7.8 0.0106 Exploitation Less Likely
High CVE-2022-22026 Windows Client/Server Runtime Subsystem Elevation of Privilege 8.8 0.0102 Exploitation Less Likely
High CVE-2022-22022 Windows Print Spooler Components Elevation of Privilege 7.1 0.0078 Exploitation Less Likely
High CVE-2022-30226 Windows Print Spooler Components Elevation of Privilege 7.1 0.0078 Exploitation Less Likely
High CVE-2022-30222 Windows Shell Remote Code Execution 8.4 0.0073 Exploitation Less Likely
High CVE-2022-22043 Windows Fast FAT Driver Denial of Service 7.8 0.0072 Exploitation Less Likely
High CVE-2022-22031 Windows Credential Guard Elevation of Privilege 7.8 0.0071 Exploitation Less Likely
High CVE-2022-22050 Windows Fax and Scan Service Elevation of Privilege 7.8 0.0063 Exploitation Less Likely
Showing 1 to 25 of 40 1Next