Microsoft · Security update · August 9, 2022
KB5016686: August 2022 security update
KB5016686, released August 9, 2022, fixes 24 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
UrgentUnsupported product
CVEs closed
24
10 rated Critical
Exploited
0
None reported
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.3814
98th percentile
Priority of the 24 CVEs
Patch now 0
Urgent 13
High 7
Routine 4
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2022-34689 | Windows CryptoAPI | Spoofing | 7.5 | 0.3814 | More likely |
| Urgent | CVE-2022-35793 | Windows Print Spooler Components | Elevation of Privilege | 7.3 | 0.0936 | More likely |
| Urgent | CVE-2022-35750 | Windows Canonical Display Driver | Elevation of Privilege | 7.8 | 0.0648 | More likely |
| Urgent | CVE-2022-35751 | Role: Windows Hyper-V | Elevation of Privilege | 7.8 | 0.0546 | More likely |
| Urgent | CVE-2022-30133 | Windows Point-to-Point Tunneling Protocol | Remote Code Execution | 9.8 | 0.0281 | Exploitation Less Likely |
| Urgent | CVE-2022-34691 | Active Directory Domain Services | Elevation of Privilege | 8.8 | 0.0237 | Exploitation Less Likely |
| Urgent | CVE-2022-34714 | Windows Secure Socket Tunneling Protocol (SSTP) | Remote Code Execution | 8.1 | 0.0201 | Exploitation Less Likely |
| Urgent | CVE-2022-35744 | Windows Point-to-Point Tunneling Protocol | Remote Code Execution | 9.8 | 0.0198 | Exploitation Less Likely |
| Urgent | CVE-2022-35767 | Windows Secure Socket Tunneling Protocol (SSTP) | Remote Code Execution | 8.1 | 0.0181 | Exploitation Less Likely |
| Urgent | CVE-2022-34702 | Windows Secure Socket Tunneling Protocol (SSTP) | Remote Code Execution | 8.1 | 0.0131 | Exploitation Less Likely |
| Urgent | CVE-2022-35745 | Windows Secure Socket Tunneling Protocol (SSTP) | Remote Code Execution | 8.1 | 0.0123 | Exploitation Less Likely |
| Urgent | CVE-2022-35752 | Remote Access Service Point-to-Point Tunneling Protocol | Remote Code Execution | 8.1 | 0.0123 | Exploitation Less Likely |
| Urgent | CVE-2022-35753 | Remote Access Service Point-to-Point Tunneling Protocol | Remote Code Execution | 8.1 | 0.0123 | Exploitation Less Likely |
| High | CVE-2022-34701 | Windows Secure Socket Tunneling Protocol (SSTP) | Denial of Service | 7.5 | 0.0294 | Exploitation Less Likely |
| High | CVE-2022-35769 | Remote Access Service Point-to-Point Tunneling Protocol | Denial of Service | 7.5 | 0.0250 | Exploitation Less Likely |
| High | CVE-2022-30194 | Windows WebBrowser Control | Remote Code Execution | 7.5 | 0.0153 | Exploitation Less Likely |
| High | CVE-2022-34707 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0134 | Exploitation Less Likely |
| High | CVE-2022-35768 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0109 | Exploitation Less Likely |
| High | CVE-2022-34690 | Role: Windows Fax Service | Elevation of Privilege | 7.1 | 0.0061 | Exploitation Less Likely |
| High | CVE-2022-34706 | Windows Local Security Authority (LSA) | Elevation of Privilege | 7.8 | 0.0045 | Exploitation Less Likely |
| Routine | CVE-2022-35759 | Windows Local Security Authority (LSA) | Denial of Service | 6.5 | 0.0170 | Exploitation Less Likely |
| Routine | CVE-2022-35747 | Windows Point-to-Point Tunneling Protocol | Denial of Service | 5.9 | 0.0168 | Exploitation Less Likely |
| Routine | CVE-2022-34708 | Windows Kernel | Information Disclosure | 5.5 | 0.0154 | Exploitation Less Likely |
| Routine | CVE-2022-35758 | Windows Kernel | Information Disclosure | 5.5 | 0.0050 | Exploitation Less Likely |
Showing 1 to 24 of 24
1