Microsoft · Security update · July 12, 2022

KB5015870: July 2022 security update

KB5015870, released July 12, 2022, fixes 30 CVEs across 4 products. One of them is being exploited (CVE-2022-22047); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product
CVEs closed
30
2 rated Critical
Exploited
1
CVE-2022-22047
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.3270
98th percentile

Priority of the 30 CVEs

Patch now 1 Urgent 5 High 17 Routine 7

Applies to

Product
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2022-22047 Windows Client/Server Runtime Subsystem Elevation of Privilege 7.8 0.1877 KEVExploited
Urgent CVE-2022-22034 Microsoft Graphics Component Elevation of Privilege 7.8 0.0625 More likely
Urgent CVE-2022-22029 Windows Network File System Remote Code Execution 8.1 0.0522 Exploitation Less Likely
Urgent CVE-2022-30220 Windows Storage Elevation of Privilege 7.8 0.0520 More likely
Urgent CVE-2022-30202 Windows Advanced Local Procedure Call Elevation of Privilege 7.0 0.0447 More likely
Urgent CVE-2022-22039 Windows Network File System Remote Code Execution 7.5 0.0232 Exploitation Less Likely
High CVE-2022-22025 Windows IIS Denial of Service 7.5 0.3270 Exploitation Less Likely
High CVE-2022-30209 Windows IIS Elevation of Privilege 7.4 0.0256 Exploitation Less Likely
High CVE-2022-22037 Windows Advanced Local Procedure Call Elevation of Privilege 7.5 0.0250 Exploitation Less Likely
High CVE-2022-22027 Role: Windows Fax Service Remote Code Execution 7.8 0.0223 Exploitation Less Likely
High CVE-2022-30206 Windows Print Spooler Components Elevation of Privilege 7.8 0.0222 Exploitation Less Likely
High CVE-2022-22024 Role: Windows Fax Service Remote Code Execution 7.8 0.0211 Exploitation Less Likely
High CVE-2022-30211 Windows Point-to-Point Tunneling Protocol Remote Code Execution 7.5 0.0207 Exploitation Less Likely
High CVE-2022-22040 Windows IIS Denial of Service 7.3 0.0150 Exploitation Less Likely
High CVE-2022-30203 Windows Boot Manager Security Feature Bypass 7.4 0.0150 Exploitation Less Likely
High CVE-2022-22049 Windows Client/Server Runtime Subsystem Elevation of Privilege 7.8 0.0106 Exploitation Less Likely
High CVE-2022-22026 Windows Client/Server Runtime Subsystem Elevation of Privilege 8.8 0.0102 Exploitation Less Likely
High CVE-2022-22022 Windows Print Spooler Components Elevation of Privilege 7.1 0.0078 Exploitation Less Likely
High CVE-2022-30226 Windows Print Spooler Components Elevation of Privilege 7.1 0.0078 Exploitation Less Likely
High CVE-2022-22043 Windows Fast FAT Driver Denial of Service 7.8 0.0072 Exploitation Less Likely
High CVE-2022-22050 Windows Fax and Scan Service Elevation of Privilege 7.8 0.0063 Exploitation Less Likely
High CVE-2022-30225 Windows Media Elevation of Privilege 7.1 0.0056 Exploitation Less Likely
High CVE-2022-30224 Windows Advanced Local Procedure Call Elevation of Privilege 7.0 0.0051 Exploitation Less Likely
Routine CVE-2022-30208 Windows Security Account Manager Denial of Service 6.5 0.0250 Exploitation Less Likely
Routine CVE-2022-22028 Windows Network File System Information Disclosure 5.9 0.0243 Exploitation Less Likely
Showing 1 to 25 of 30 1Next