Microsoft · Security update · August 9, 2022

KB5016623: August 2022 cumulative update for Windows 10 1809

KB5016623, released August 9, 2022, fixes 58 CVEs across 5 products. One of them is being exploited (CVE-2022-34713); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV1 publicly disclosed
CVEs closed
58
13 rated Critical
Exploited
1
CVE-2022-34713
Exploitation more likely
13
Vendor assessment
Highest EPSS
0.6776
99th percentile

Priority of the 58 CVEs

Patch now 1 Urgent 25 High 22 Routine 10

Applies to

ProductBuild after install
Windows 10 Version 1809 for 32-bit Systems17763.3287
Windows 10 Version 1809 for ARM64-based Systems17763.3287
Windows 10 Version 1809 for x64-based Systems17763.3287
Windows Server 201917763.3287
Windows Server 2019 (Server Core installation)17763.3287

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2022-34713 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution 7.8 0.6776 KEVDisclosedExploited
Urgent CVE-2022-35748 Windows Internet Information Services Denial of Service 7.5 0.4723 More likely
Urgent CVE-2022-34689 Windows CryptoAPI Spoofing 7.5 0.3814 More likely
Urgent CVE-2022-35756 Windows Kerberos Elevation of Privilege 7.8 0.1131 More likely
Urgent CVE-2022-35755 Windows Print Spooler Components Elevation of Privilege 7.3 0.0980 More likely
Urgent CVE-2022-35793 Windows Print Spooler Components Elevation of Privilege 7.3 0.0936 More likely
Urgent CVE-2022-35750 Windows Canonical Display Driver Elevation of Privilege 7.8 0.0648 More likely
Urgent CVE-2022-35751 Role: Windows Hyper-V Elevation of Privilege 7.8 0.0546 More likely
Urgent CVE-2022-34699 Windows Win32K Elevation of Privilege 7.8 0.0447 More likely
Urgent CVE-2022-35761 Windows Kernel Elevation of Privilege 7.8 0.0413 More likely
Urgent CVE-2022-30133 Windows Point-to-Point Tunneling Protocol Remote Code Execution 9.8 0.0281 Exploitation Less Likely
Urgent CVE-2022-34691 Active Directory Domain Services Elevation of Privilege 8.8 0.0237 Exploitation Less Likely
Urgent CVE-2022-34714 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0201 Exploitation Less Likely
Urgent CVE-2022-35744 Windows Point-to-Point Tunneling Protocol Remote Code Execution 9.8 0.0198 Exploitation Less Likely
Urgent CVE-2022-35794 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0195 Exploitation Less Likely
Urgent CVE-2022-35766 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0181 Exploitation Less Likely
Urgent CVE-2022-35767 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0181 Exploitation Less Likely
Urgent CVE-2022-35743 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution 7.8 0.0145 More likely
Urgent CVE-2022-34702 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0131 Exploitation Less Likely
Urgent CVE-2022-35745 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0123 Exploitation Less Likely
Urgent CVE-2022-35752 Remote Access Service Point-to-Point Tunneling Protocol Remote Code Execution 8.1 0.0123 Exploitation Less Likely
Urgent CVE-2022-35753 Remote Access Service Point-to-Point Tunneling Protocol Remote Code Execution 8.1 0.0123 Exploitation Less Likely
Urgent CVE-2022-34703 Windows Partition Management Driver Elevation of Privilege 7.8 0.0063 More likely
Urgent CVE-2022-35820 Microsoft Bluetooth Driver Elevation of Privilege 7.8 0.0056 More likely
Urgent CVE-2022-33670 Windows Partition Management Driver Elevation of Privilege 7.8 0.0054 More likely
Showing 1 to 25 of 58 1Next