Microsoft · Security update · July 12, 2022

KB5015832: July 2022 cumulative update for Windows 10 1507

KB5015832, released July 12, 2022, fixes 36 CVEs across 2 products. One of them is being exploited (CVE-2022-22047); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product
CVEs closed
36
2 rated Critical
Exploited
1
CVE-2022-22047
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.3270
98th percentile

Priority of the 36 CVEs

Patch now 1 Urgent 5 High 20 Routine 10

Applies to

ProductBuild after install
Windows 10 for 32-bit Systems10240.19360
Windows 10 for x64-based Systems10240.19360

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2022-22047 Windows Client/Server Runtime Subsystem Elevation of Privilege 7.8 0.1877 KEVExploited
Urgent CVE-2022-22034 Microsoft Graphics Component Elevation of Privilege 7.8 0.0625 More likely
Urgent CVE-2022-30220 Windows Storage Elevation of Privilege 7.8 0.0520 More likely
Urgent CVE-2022-30202 Windows Advanced Local Procedure Call Elevation of Privilege 7.0 0.0447 More likely
Urgent CVE-2022-22038 Windows Remote Procedure Call Runtime Remote Code Execution 8.1 0.0252 Exploitation Less Likely
Urgent CVE-2022-30221 Microsoft Graphics Component Remote Code Execution 8.8 0.0212 Exploitation Less Likely
High CVE-2022-22025 Windows IIS Denial of Service 7.5 0.3270 Exploitation Less Likely
High CVE-2022-30209 Windows IIS Elevation of Privilege 7.4 0.0256 Exploitation Less Likely
High CVE-2022-22037 Windows Advanced Local Procedure Call Elevation of Privilege 7.5 0.0250 Exploitation Less Likely
High CVE-2022-22027 Role: Windows Fax Service Remote Code Execution 7.8 0.0223 Exploitation Less Likely
High CVE-2022-30206 Windows Print Spooler Components Elevation of Privilege 7.8 0.0222 Exploitation Less Likely
High CVE-2022-22024 Role: Windows Fax Service Remote Code Execution 7.8 0.0211 Exploitation Less Likely
High CVE-2022-30211 Windows Point-to-Point Tunneling Protocol Remote Code Execution 7.5 0.0207 Exploitation Less Likely
High CVE-2022-22040 Windows IIS Denial of Service 7.3 0.0150 Exploitation Less Likely
High CVE-2022-30203 Windows Boot Manager Security Feature Bypass 7.4 0.0150 Exploitation Less Likely
High CVE-2022-22049 Windows Client/Server Runtime Subsystem Elevation of Privilege 7.8 0.0106 Exploitation Less Likely
High CVE-2022-22026 Windows Client/Server Runtime Subsystem Elevation of Privilege 8.8 0.0102 Exploitation Less Likely
High CVE-2022-22022 Windows Print Spooler Components Elevation of Privilege 7.1 0.0078 Exploitation Less Likely
High CVE-2022-30226 Windows Print Spooler Components Elevation of Privilege 7.1 0.0078 Exploitation Less Likely
High CVE-2022-22043 Windows Fast FAT Driver Denial of Service 7.8 0.0072 Exploitation Less Likely
High CVE-2022-22031 Windows Credential Guard Elevation of Privilege 7.8 0.0071 Exploitation Less Likely
High CVE-2022-22050 Windows Fax and Scan Service Elevation of Privilege 7.8 0.0063 Exploitation Less Likely
High CVE-2022-30225 Windows Media Elevation of Privilege 7.1 0.0056 Exploitation Less Likely
High CVE-2022-22045 Windows Media Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
High CVE-2022-30224 Windows Advanced Local Procedure Call Elevation of Privilege 7.0 0.0051 Exploitation Less Likely
Showing 1 to 25 of 36 1Next