Microsoft · Security update · September 13, 2022

KB5017315: September 2022 cumulative update for Windows 10 1809

KB5017315, released September 13, 2022, fixes 42 CVEs across 5 products. One of them is being exploited (CVE-2022-37969); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
42
4 rated Critical
Exploited
1
CVE-2022-37969
Exploitation more likely
6
Microsoft's assessment
Highest EPSS
0.8603
99th percentile

Priority of the 42 CVEs

Patch now 1 Urgent 9 High 26 Routine 6

Applies to

ProductBuild after install
Windows 10 Version 1809 for 32-bit Systems17763.3406
Windows 10 Version 1809 for ARM64-based Systems17763.3406
Windows 10 Version 1809 for x64-based Systems17763.3406
Windows Server 201917763.3406
Windows Server 2019 (Server Core installation)17763.3406

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2022-37969 Windows Common Log File System DriverElevation of Privilege7.8 0.2848 KEVRansomwareDisclosedExploited
Urgent CVE-2022-37958 Windows SPNEGO Extended NegotiationRemote Code Execution8.1 0.8603 Exploitation Less Likely
Urgent CVE-2022-34721 Windows IKE ExtensionRemote Code Execution9.8 0.7624 Exploitation Less Likely
Urgent CVE-2022-34718 Windows TCP/IPRemote Code Execution9.8 0.5470 More likely
Urgent CVE-2022-37954 Microsoft Graphics ComponentElevation of Privilege7.8 0.4490 More likely
Urgent CVE-2022-35803 Windows Common Log File System DriverElevation of Privilege7.8 0.2382 More likely
Urgent CVE-2022-37957 Windows KernelElevation of Privilege7.8 0.1357 More likely
Urgent CVE-2022-34729 Microsoft Graphics ComponentElevation of Privilege7.8 0.1053 More likely
Urgent CVE-2022-34725 Windows ALPCElevation of Privilege7.0 0.0538 More likely
Urgent CVE-2022-34722 Windows IKE ExtensionRemote Code Execution9.8 0.0280 Exploitation Less Likely
High CVE-2022-33679 Windows KerberosElevation of Privilege8.1 0.1114 Exploitation Less Likely
High CVE-2022-34724 Role: DNS ServerDenial of Service7.5 0.0370 Exploitation Less Likely
High CVE-2022-34720 Windows IKE ExtensionDenial of Service7.5 0.0363 Exploitation Less Likely
High CVE-2022-35841 Windows Enterprise App ManagementRemote Code Execution8.8 0.0360 Exploitation Less Likely
High CVE-2022-35833 Windows Transport Security Layer (TLS)Denial of Service7.5 0.0301 Exploitation Less Likely
High CVE-2022-34726 Windows ODBC DriverRemote Code Execution8.8 0.0270 Exploitation Less Likely
High CVE-2022-34727 Windows ODBC DriverRemote Code Execution8.8 0.0270 Exploitation Less Likely
High CVE-2022-34730 Windows ODBC DriverRemote Code Execution8.8 0.0270 Exploitation Less Likely
High CVE-2022-34732 Windows ODBC DriverRemote Code Execution8.8 0.0270 Exploitation Unlikely
High CVE-2022-34734 Windows ODBC DriverRemote Code Execution8.8 0.0270 Exploitation Less Likely
High CVE-2022-34731 Windows OLE DBRemote Code Execution8.8 0.0220 Exploitation Less Likely
High CVE-2022-34733 Windows OLE DBRemote Code Execution8.8 0.0220 Exploitation Less Likely
High CVE-2022-35834 Windows OLE DBRemote Code Execution8.8 0.0220 Exploitation Less Likely
High CVE-2022-35835 Windows OLE DBRemote Code Execution8.8 0.0220 Exploitation Less Likely
High CVE-2022-35836 Windows OLE DBRemote Code Execution8.8 0.0220 Exploitation Less Likely
Showing 1 to 25 of 42 1Next

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.