Microsoft · Security update · August 9, 2022

KB5016622: August 2022 cumulative update for Windows 10 1607

KB5016622, released August 9, 2022, fixes 52 CVEs across 5 products. One of them is being exploited (CVE-2022-34713); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV1 publicly disclosed
CVEs closed
52
11 rated Critical
Exploited
1
CVE-2022-34713
Exploitation more likely
13
Vendor assessment
Highest EPSS
0.6776
99th percentile

Priority of the 52 CVEs

Patch now 1 Urgent 23 High 20 Routine 8

Applies to

ProductBuild after install
Windows 10 Version 1607 for 32-bit Systems14393.5291
Windows 10 Version 1607 for x64-based Systems14393.5291
Windows 7 for 32-bit Systems Service Pack 114393.5291
Windows Server 201614393.5291
Windows Server 2016 (Server Core installation)14393.5291

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2022-34713 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution 7.8 0.6776 KEVDisclosedExploited
Urgent CVE-2022-35748 Windows Internet Information Services Denial of Service 7.5 0.4723 More likely
Urgent CVE-2022-34689 Windows CryptoAPI Spoofing 7.5 0.3814 More likely
Urgent CVE-2022-35756 Windows Kerberos Elevation of Privilege 7.8 0.1131 More likely
Urgent CVE-2022-35755 Windows Print Spooler Components Elevation of Privilege 7.3 0.0980 More likely
Urgent CVE-2022-35793 Windows Print Spooler Components Elevation of Privilege 7.3 0.0936 More likely
Urgent CVE-2022-35750 Windows Canonical Display Driver Elevation of Privilege 7.8 0.0648 More likely
Urgent CVE-2022-35751 Role: Windows Hyper-V Elevation of Privilege 7.8 0.0546 More likely
Urgent CVE-2022-34699 Windows Win32K Elevation of Privilege 7.8 0.0447 More likely
Urgent CVE-2022-35761 Windows Kernel Elevation of Privilege 7.8 0.0413 More likely
Urgent CVE-2022-30133 Windows Point-to-Point Tunneling Protocol Remote Code Execution 9.8 0.0281 Exploitation Less Likely
Urgent CVE-2022-34691 Active Directory Domain Services Elevation of Privilege 8.8 0.0237 Exploitation Less Likely
Urgent CVE-2022-34714 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0201 Exploitation Less Likely
Urgent CVE-2022-35744 Windows Point-to-Point Tunneling Protocol Remote Code Execution 9.8 0.0198 Exploitation Less Likely
Urgent CVE-2022-35767 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0181 Exploitation Less Likely
Urgent CVE-2022-35743 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution 7.8 0.0145 More likely
Urgent CVE-2022-34702 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0131 Exploitation Less Likely
Urgent CVE-2022-35745 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0123 Exploitation Less Likely
Urgent CVE-2022-35752 Remote Access Service Point-to-Point Tunneling Protocol Remote Code Execution 8.1 0.0123 Exploitation Less Likely
Urgent CVE-2022-35753 Remote Access Service Point-to-Point Tunneling Protocol Remote Code Execution 8.1 0.0123 Exploitation Less Likely
Urgent CVE-2022-34703 Windows Partition Management Driver Elevation of Privilege 7.8 0.0063 More likely
Urgent CVE-2022-35820 Microsoft Bluetooth Driver Elevation of Privilege 7.8 0.0056 More likely
Urgent CVE-2022-33670 Windows Partition Management Driver Elevation of Privilege 7.8 0.0054 More likely
Urgent CVE-2022-34696 Role: Windows Hyper-V Remote Code Execution 7.8 0.0034 Exploitation Less Likely
High CVE-2022-34701 Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service 7.5 0.0294 Exploitation Less Likely
Showing 1 to 25 of 52 1Next