Microsoft · Security update · December 13, 2022
KB5021291: December 2022 security update
KB5021291, released December 13, 2022, fixes 15 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
UrgentUnsupported product
CVEs closed
15
3 rated Critical
Exploited
0
None reported
Exploitation more likely
4
Vendor assessment
Highest EPSS
0.6078
99th percentile
Priority of the 15 CVEs
Patch now 0
Urgent 6
High 8
Routine 1
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2022-41076 | Windows PowerShell | Remote Code Execution | 8.5 | 0.6078 | More likely |
| Urgent | CVE-2022-44673 | Client Server Run-time Subsystem (CSRSS) | Elevation of Privilege | 7.0 | 0.0525 | More likely |
| Urgent | CVE-2022-44675 | Microsoft Bluetooth Driver | Elevation of Privilege | 7.8 | 0.0498 | More likely |
| Urgent | CVE-2022-44670 | Windows Secure Socket Tunneling Protocol (SSTP) | Remote Code Execution | 8.1 | 0.0122 | Exploitation Unlikely |
| Urgent | CVE-2022-44676 | Windows Secure Socket Tunneling Protocol (SSTP) | Remote Code Execution | 8.1 | 0.0116 | Exploitation Less Likely |
| Urgent | CVE-2022-41121 | Microsoft Graphics Component | Elevation of Privilege | 7.8 | 0.0112 | More likely |
| High | CVE-2022-44666 | Windows Contacts | Remote Code Execution | 7.8 | 0.4137 | Exploitation Less Likely |
| High | CVE-2022-44667 | Microsoft Windows Codecs Library | Remote Code Execution | 7.8 | 0.0081 | Exploitation Less Likely |
| High | CVE-2022-44668 | Microsoft Windows Codecs Library | Remote Code Execution | 7.8 | 0.0081 | Exploitation Less Likely |
| High | CVE-2022-44678 | Windows HTTP Print Provider | Elevation of Privilege | 7.8 | 0.0056 | Exploitation Less Likely |
| High | CVE-2022-44681 | Windows Print Spooler Components | Elevation of Privilege | 7.8 | 0.0055 | Exploitation Unlikely |
| High | CVE-2022-41077 | Windows Fax Compose Form | Elevation of Privilege | 7.8 | 0.0055 | Exploitation Less Likely |
| High | CVE-2022-44697 | Microsoft Graphics Component | Denial of Service | 7.8 | 0.0055 | Exploitation Less Likely |
| High | CVE-2022-41094 | Role: Windows Hyper-V | Elevation of Privilege | 7.8 | 0.0053 | Exploitation Less Likely |
| Routine | CVE-2022-41074 | Microsoft Graphics Component | Information Disclosure | 5.5 | 0.0056 | Exploitation Less Likely |
Showing 1 to 15 of 15
1