Microsoft · Security update · August 9, 2022
KB5016627: August 2022 cumulative update for Windows Server 2022
KB5016627, released August 9, 2022, fixes 60 CVEs across 2 products. One of them is being exploited (CVE-2022-34713); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV1 publicly disclosed
CVEs closed
60
13 rated Critical
Exploited
1
CVE-2022-34713
Exploitation more likely
16
Vendor assessment
Highest EPSS
0.7973
99th percentile
Priority of the 60 CVEs
Patch now 1
Urgent 28
High 22
Routine 9
Applies to
| Product | Build after install |
|---|---|
| Windows Server 2022 | 20348.887 |
| Windows Server 2022 (Server Core installation) | 20348.887 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2022-34713 | Microsoft Windows Support Diagnostic Tool (MSDT) | Remote Code Execution | 7.8 | 0.6776 | KEVDisclosedExploited |
| Urgent | CVE-2022-35748 | Windows Internet Information Services | Denial of Service | 7.5 | 0.4723 | More likely |
| Urgent | CVE-2022-34689 | Windows CryptoAPI | Spoofing | 7.5 | 0.3814 | More likely |
| Urgent | CVE-2022-35756 | Windows Kerberos | Elevation of Privilege | 7.8 | 0.1131 | More likely |
| Urgent | CVE-2022-35755 | Windows Print Spooler Components | Elevation of Privilege | 7.3 | 0.0980 | More likely |
| Urgent | CVE-2022-35793 | Windows Print Spooler Components | Elevation of Privilege | 7.3 | 0.0936 | More likely |
| Urgent | CVE-2022-35750 | Windows Canonical Display Driver | Elevation of Privilege | 7.8 | 0.0648 | More likely |
| Urgent | CVE-2022-35751 | Role: Windows Hyper-V | Elevation of Privilege | 7.8 | 0.0546 | More likely |
| Urgent | CVE-2022-34699 | Windows Win32K | Elevation of Privilege | 7.8 | 0.0447 | More likely |
| Urgent | CVE-2022-35761 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0413 | More likely |
| Urgent | CVE-2022-30133 | Windows Point-to-Point Tunneling Protocol | Remote Code Execution | 9.8 | 0.0281 | Exploitation Less Likely |
| Urgent | CVE-2022-34691 | Active Directory Domain Services | Elevation of Privilege | 8.8 | 0.0237 | Exploitation Less Likely |
| Urgent | CVE-2022-34714 | Windows Secure Socket Tunneling Protocol (SSTP) | Remote Code Execution | 8.1 | 0.0201 | Exploitation Less Likely |
| Urgent | CVE-2022-35744 | Windows Point-to-Point Tunneling Protocol | Remote Code Execution | 9.8 | 0.0198 | Exploitation Less Likely |
| Urgent | CVE-2022-35794 | Windows Secure Socket Tunneling Protocol (SSTP) | Remote Code Execution | 8.1 | 0.0195 | Exploitation Less Likely |
| Urgent | CVE-2022-35766 | Windows Secure Socket Tunneling Protocol (SSTP) | Remote Code Execution | 8.1 | 0.0181 | Exploitation Less Likely |
| Urgent | CVE-2022-35767 | Windows Secure Socket Tunneling Protocol (SSTP) | Remote Code Execution | 8.1 | 0.0181 | Exploitation Less Likely |
| Urgent | CVE-2022-35743 | Microsoft Windows Support Diagnostic Tool (MSDT) | Remote Code Execution | 7.8 | 0.0145 | More likely |
| Urgent | CVE-2022-34702 | Windows Secure Socket Tunneling Protocol (SSTP) | Remote Code Execution | 8.1 | 0.0131 | Exploitation Less Likely |
| Urgent | CVE-2022-35745 | Windows Secure Socket Tunneling Protocol (SSTP) | Remote Code Execution | 8.1 | 0.0123 | Exploitation Less Likely |
| Urgent | CVE-2022-35752 | Remote Access Service Point-to-Point Tunneling Protocol | Remote Code Execution | 8.1 | 0.0123 | Exploitation Less Likely |
| Urgent | CVE-2022-35753 | Remote Access Service Point-to-Point Tunneling Protocol | Remote Code Execution | 8.1 | 0.0123 | Exploitation Less Likely |
| Urgent | CVE-2022-34302 | Windows Secure Boot | Security Feature Bypass | 7.5 | 0.0109 | More likely |
| Urgent | CVE-2022-34301 | Windows Secure Boot | Security Feature Bypass | 7.2 | 0.0099 | More likely |
| Urgent | CVE-2022-34303 | Windows Secure Boot | Security Feature Bypass | 7.2 | 0.0086 | More likely |
Showing 1 to 25 of 60
1Next