Microsoft · Security update · December 13, 2022

KB5021296: December 2022 security update

KB5021296, released December 13, 2022, fixes 20 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
20
3 rated Critical
Exploited
0
None reported
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.6078
99th percentile

Priority of the 20 CVEs

Patch now 0 Urgent 7 High 9 Routine 4

Applies to

Product
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2022-41076 Windows PowerShell Remote Code Execution 8.5 0.6078 More likely
Urgent CVE-2022-44683 Windows Kernel Elevation of Privilege 7.8 0.0820 More likely
Urgent CVE-2022-44673 Client Server Run-time Subsystem (CSRSS) Elevation of Privilege 7.0 0.0525 More likely
Urgent CVE-2022-44675 Microsoft Bluetooth Driver Elevation of Privilege 7.8 0.0498 More likely
Urgent CVE-2022-44670 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0122 Exploitation Unlikely
Urgent CVE-2022-44676 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution 8.1 0.0116 Exploitation Less Likely
Urgent CVE-2022-41121 Microsoft Graphics Component Elevation of Privilege 7.8 0.0112 More likely
High CVE-2022-44666 Windows Contacts Remote Code Execution 7.8 0.4137 Exploitation Less Likely
High CVE-2022-44667 Microsoft Windows Codecs Library Remote Code Execution 7.8 0.0081 Exploitation Less Likely
High CVE-2022-44668 Microsoft Windows Codecs Library Remote Code Execution 7.8 0.0081 Exploitation Less Likely
High CVE-2022-44678 Windows HTTP Print Provider Elevation of Privilege 7.8 0.0056 Exploitation Less Likely
High CVE-2022-44681 Windows Print Spooler Components Elevation of Privilege 7.8 0.0055 Exploitation Unlikely
High CVE-2022-41077 Windows Fax Compose Form Elevation of Privilege 7.8 0.0055 Exploitation Less Likely
High CVE-2022-44697 Microsoft Graphics Component Denial of Service 7.8 0.0055 Exploitation Less Likely
High CVE-2022-41094 Role: Windows Hyper-V Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2022-44680 Microsoft Graphics Component Elevation of Privilege 7.8 0.0052 Exploitation Less Likely
Routine CVE-2022-44707 Windows Kernel Denial of Service 6.5 0.0271 Exploitation Less Likely
Routine CVE-2022-44682 Role: Windows Hyper-V Denial of Service 6.8 0.0075 Exploitation Less Likely
Routine CVE-2022-44679 Microsoft Graphics Component Information Disclosure 6.5 0.0056 Exploitation Less Likely
Routine CVE-2022-41074 Microsoft Graphics Component Information Disclosure 5.5 0.0056 Exploitation Less Likely
Showing 1 to 20 of 20 1