Microsoft · Security update · December 13, 2022

KB5021233: December 2022 cumulative update for Windows 10 20H2

KB5021233, released December 13, 2022, fixes 26 CVEs across 11 products. One of them is being exploited (CVE-2022-44698); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use
CVEs closed
26
3 rated Critical
Exploited
1
CVE-2022-44698
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.7482
99th percentile

Priority of the 26 CVEs

Patch now 1 Urgent 8 High 12 Routine 5

Applies to

Product
Windows 10 Version 20H2 for 32-bit Systems
Windows 10 Version 20H2 for ARM64-based Systems
Windows 10 Version 21H1 for 32-bit Systems
Windows 10 Version 21H1 for ARM64-based Systems
Windows 10 Version 21H1 for x64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2022-44698 Windows SmartScreen Security Feature Bypass 5.4 0.7482 KEVRansomwareExploited
Urgent CVE-2022-41076 Windows PowerShell Remote Code Execution 8.5 0.6078 More likely
Urgent CVE-2022-44683 Windows Kernel Elevation of Privilege 7.8 0.0820 More likely
Urgent CVE-2022-44673 Client Server Run-time Subsystem (CSRSS) Elevation of Privilege 7.0 0.0525 More likely
Urgent CVE-2022-44675 Microsoft Bluetooth Driver Elevation of Privilege 7.8 0.0498 More likely
Urgent CVE-2022-44670 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0122 Exploitation Unlikely
Urgent CVE-2022-44676 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0116 Exploitation Less Likely
Urgent CVE-2022-41121 Microsoft Graphics Component Elevation of Privilege 7.8 0.0112 More likely
Urgent CVE-2022-44671 Microsoft Graphics Component Elevation of Privilege 7.8 0.0066 More likely
High CVE-2022-44666 Windows Contacts Remote Code Execution 7.8 0.4137 Exploitation Less Likely
High CVE-2022-44667 Microsoft Windows Codecs Library Remote Code Execution 7.8 0.0081 Exploitation Less Likely
High CVE-2022-44668 Microsoft Windows Codecs Library Remote Code Execution 7.8 0.0081 Exploitation Less Likely
High CVE-2022-44678 Windows HTTP Print Provider Elevation of Privilege 7.8 0.0056 Exploitation Less Likely
High CVE-2022-44681 Windows Print Spooler Components Elevation of Privilege 7.8 0.0055 Exploitation Unlikely
High CVE-2022-41077 Windows Fax Compose Form Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
High CVE-2022-44697 Microsoft Graphics Component Denial of Service 7.8 0.0055 Exploitation Less Likely
High CVE-2022-41094 Role: Windows Hyper-V Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2022-44677 Windows Projected File System Elevation of Privilege 7.8 0.0052 Exploitation Less Likely
High CVE-2022-44680 Microsoft Graphics Component Elevation of Privilege 7.8 0.0052 Exploitation Less Likely
High CVE-2022-44689 Windows Subsystem for Linux Elevation of Privilege 7.8 0.0050 Exploitation Less Likely
High CVE-2022-44669 Windows Error Reporting Elevation of Privilege 7.0 0.0032 Exploitation Less Likely
Routine CVE-2022-44707 Windows Kernel Denial of Service 6.5 0.0271 Exploitation Less Likely
Routine CVE-2022-44682 Role: Windows Hyper-V Denial of Service 6.8 0.0075 Exploitation Less Likely
Routine CVE-2022-44679 Microsoft Graphics Component Information Disclosure 6.5 0.0056 Exploitation Less Likely
Routine CVE-2022-41074 Microsoft Graphics Component Information Disclosure 5.5 0.0056 Exploitation Less Likely
Showing 1 to 25 of 26 1Next