Microsoft · ServicingStack update · December 13, 2022

KB5021255: December 2022 cumulative update for Windows 11 22H2

KB5021255, released December 13, 2022, fixes 25 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

Urgent1 publicly disclosedUnsupported product
CVEs closed
25
3 rated Critical
Exploited
0
None reported
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.6078
99th percentile

Priority of the 25 CVEs

Patch now 0 Urgent 7 High 13 Routine 5

Applies to

ProductBuild after install
Windows 11 Version 22H2 for ARM64-based Systems22621.963
Windows 11 Version 22H2 for x64-based Systems22621.963

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2022-41076 Windows PowerShell Remote Code Execution 8.5 0.6078 More likely
Urgent CVE-2022-44683 Windows Kernel Elevation of Privilege 7.8 0.0820 More likely
Urgent CVE-2022-44675 Microsoft Bluetooth Driver Elevation of Privilege 7.8 0.0498 More likely
Urgent CVE-2022-44670 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0122 Exploitation Unlikely
Urgent CVE-2022-44676 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0116 Exploitation Less Likely
Urgent CVE-2022-41121 Microsoft Graphics Component Elevation of Privilege 7.8 0.0112 More likely
Urgent CVE-2022-44671 Microsoft Graphics Component Elevation of Privilege 7.8 0.0066 More likely
High CVE-2022-44666 Windows Contacts Remote Code Execution 7.8 0.4137 Exploitation Less Likely
High CVE-2022-44667 Microsoft Windows Codecs Library Remote Code Execution 7.8 0.0081 Exploitation Less Likely
High CVE-2022-44668 Microsoft Windows Codecs Library Remote Code Execution 7.8 0.0081 Exploitation Less Likely
High CVE-2022-44678 Windows HTTP Print Provider Elevation of Privilege 7.8 0.0056 Exploitation Less Likely
High CVE-2022-44710 Windows DirectX Elevation of Privilege 7.8 0.0056 DisclosedExploitation Less Likely
High CVE-2022-44681 Windows Print Spooler Components Elevation of Privilege 7.8 0.0055 Exploitation Unlikely
High CVE-2022-41077 Windows Fax Compose Form Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
High CVE-2022-44697 Microsoft Graphics Component Denial of Service 7.8 0.0055 Exploitation Less Likely
High CVE-2022-41094 Role: Windows Hyper-V Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2022-44677 Windows Projected File System Elevation of Privilege 7.8 0.0052 Exploitation Less Likely
High CVE-2022-44680 Microsoft Graphics Component Elevation of Privilege 7.8 0.0052 Exploitation Less Likely
High CVE-2022-44689 Windows Subsystem for Linux Elevation of Privilege 7.8 0.0050 Exploitation Less Likely
High CVE-2022-44669 Windows Error Reporting Elevation of Privilege 7.0 0.0032 Exploitation Less Likely
Routine CVE-2022-44707 Windows Kernel Denial of Service 6.5 0.0271 Exploitation Less Likely
Routine CVE-2022-44682 Role: Windows Hyper-V Denial of Service 6.8 0.0075 Exploitation Less Likely
Routine CVE-2022-44679 Microsoft Graphics Component Information Disclosure 6.5 0.0056 Exploitation Less Likely
Routine CVE-2022-41074 Microsoft Graphics Component Information Disclosure 5.5 0.0056 Exploitation Less Likely
Routine CVE-2022-44674 Microsoft Bluetooth Driver Information Disclosure 5.5 0.0056 Exploitation Less Likely
Showing 1 to 25 of 25 1