Microsoft · Security update · March 8, 2022

KB5011491: March 2022 cumulative update for Windows 10 1507

KB5011491, released March 8, 2022, fixes 25 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

Urgent2 publicly disclosedUnsupported product
CVEs closed
25
None rated Critical
Exploited
0
None reported
Exploitation more likely
6
Microsoft's assessment
Highest EPSS
0.5638
99th percentile

Priority of the 25 CVEs

Patch now 0 Urgent 6 High 13 Routine 6

Applies to

ProductBuild after install
Windows 10 for 32-bit Systems10240.19235
Windows 10 for x64-based Systems10240.19235

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2022-23253 Windows Point-to-Point Tunneling ProtocolDenial of Service6.5 0.5638 More likely
Urgent CVE-2022-24502 Windows HTML PlatformSecurity Feature Bypass4.3 0.3306 More likely
Urgent CVE-2022-23285 Windows Remote DesktopRemote Code Execution8.8 0.2563 More likely
Urgent CVE-2022-21990 Windows Remote DesktopRemote Code Execution8.8 0.1884 DisclosedMore likely
Urgent CVE-2022-23299 Windows PDEVElevation of Privilege7.8 0.0762 More likely
Urgent CVE-2022-23294 Windows Event TracingRemote Code Execution8.8 0.0230 More likely
High CVE-2022-23284 Windows Print Spooler ComponentsElevation of Privilege7.2 0.0317 Exploitation Less Likely
High CVE-2022-24460 Tablet Windows User InterfaceElevation of Privilege7.0 0.0201 Exploitation Less Likely
High CVE-2022-24455 Windows CD-ROM DriverElevation of Privilege7.8 0.0093 Exploitation Less Likely
High CVE-2022-21967 XBoxElevation of Privilege7.0 0.0068 Exploitation Less Likely
High CVE-2022-23293 Windows Fast FAT DriverElevation of Privilege7.8 0.0067 Exploitation Less Likely
High CVE-2022-23296 Windows InstallerElevation of Privilege7.8 0.0067 Exploitation Less Likely
High CVE-2022-24459 Windows Fax and Scan ServiceElevation of Privilege7.8 0.0064 DisclosedExploitation Less Likely
High CVE-2022-23290 Windows COMElevation of Privilege7.8 0.0063 Exploitation Less Likely
High CVE-2022-24454 Windows Security Support Provider InterfaceElevation of Privilege7.8 0.0063 Exploitation Less Likely
High CVE-2022-23287 Windows ALPCElevation of Privilege7.0 0.0058 Exploitation Less Likely
High CVE-2022-23298 Windows KernelElevation of Privilege7.0 0.0058 Exploitation Less Likely
High CVE-2022-23283 Windows ALPCElevation of Privilege7.0 0.0039 Exploitation Less Likely
High CVE-2022-24505 Windows ALPCElevation of Privilege7.0 0.0036 Exploitation Less Likely
Routine CVE-2022-22010 Microsoft Windows Codecs LibraryInformation Disclosure4.4 0.0263 Exploitation Less Likely
Routine CVE-2022-21977 Microsoft Windows Codecs LibraryInformation Disclosure3.3 0.0253 Exploitation Less Likely
Routine CVE-2022-24503 Windows Remote DesktopInformation Disclosure5.4 0.0244 Exploitation Less Likely
Routine CVE-2022-23281 Windows Common Log File System DriverInformation Disclosure5.5 0.0113 Exploitation Less Likely
Routine CVE-2022-23297 Windows KernelInformation Disclosure5.5 0.0079 Exploitation Less Likely
Routine CVE-2022-21975 Role: Windows Hyper-VDenial of Service4.7 0.0047 Exploitation Less Likely
Showing 1 to 25 of 25 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.