Microsoft · Security update · August 9, 2022

KB5016672: August 2022 security update

KB5016672, released August 9, 2022, fixes 35 CVEs across 2 products. One of them is being exploited (CVE-2022-34713); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV1 publicly disclosed
CVEs closed
35
10 rated Critical
Exploited
1
CVE-2022-34713
Exploitation more likely
9
Vendor assessment
Highest EPSS
0.6776
99th percentile

Priority of the 35 CVEs

Patch now 1 Urgent 18 High 11 Routine 5

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2022-34713 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution 7.8 0.6776 KEVDisclosedExploited
Urgent CVE-2022-35748 Windows Internet Information Services Denial of Service 7.5 0.4723 More likely
Urgent CVE-2022-34689 Windows CryptoAPI Spoofing 7.5 0.3814 More likely
Urgent CVE-2022-35756 Windows Kerberos Elevation of Privilege 7.8 0.1131 More likely
Urgent CVE-2022-35793 Windows Print Spooler Components Elevation of Privilege 7.3 0.0936 More likely
Urgent CVE-2022-35750 Windows Canonical Display Driver Elevation of Privilege 7.8 0.0648 More likely
Urgent CVE-2022-35751 Role: Windows Hyper-V Elevation of Privilege 7.8 0.0546 More likely
Urgent CVE-2022-30133 Windows Point-to-Point Tunneling Protocol Remote Code Execution 9.8 0.0281 Exploitation Less Likely
Urgent CVE-2022-34691 Active Directory Domain Services Elevation of Privilege 8.8 0.0237 Exploitation Less Likely
Urgent CVE-2022-34714 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0201 Exploitation Less Likely
Urgent CVE-2022-35744 Windows Point-to-Point Tunneling Protocol Remote Code Execution 9.8 0.0198 Exploitation Less Likely
Urgent CVE-2022-35767 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0181 Exploitation Less Likely
Urgent CVE-2022-35743 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution 7.8 0.0145 More likely
Urgent CVE-2022-34702 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0131 Exploitation Less Likely
Urgent CVE-2022-35745 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0123 Exploitation Less Likely
Urgent CVE-2022-35752 Remote Access Service Point-to-Point Tunneling Protocol Remote Code Execution 8.1 0.0123 Exploitation Less Likely
Urgent CVE-2022-35753 Remote Access Service Point-to-Point Tunneling Protocol Remote Code Execution 8.1 0.0123 Exploitation Less Likely
Urgent CVE-2022-35820 Microsoft Bluetooth Driver Elevation of Privilege 7.8 0.0056 More likely
Urgent CVE-2022-33670 Windows Partition Management Driver Elevation of Privilege 7.8 0.0054 More likely
High CVE-2022-34701 Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service 7.5 0.0294 Exploitation Less Likely
High CVE-2022-35769 Remote Access Service Point-to-Point Tunneling Protocol Denial of Service 7.5 0.0250 Exploitation Less Likely
High CVE-2022-30194 Windows WebBrowser Control Remote Code Execution 7.5 0.0153 Exploitation Less Likely
High CVE-2022-34707 Windows Kernel Elevation of Privilege 7.8 0.0134 Exploitation Less Likely
High CVE-2022-35768 Windows Kernel Elevation of Privilege 7.8 0.0109 Exploitation Less Likely
High CVE-2022-35760 Microsoft ATA Port Driver Elevation of Privilege 7.8 0.0077 Exploitation Less Likely
Showing 1 to 25 of 35 1Next