Microsoft · Security update · March 8, 2022
KB5011493: March 2022 cumulative update for Windows 11 21H2
KB5011493, released March 8, 2022, fixes 28 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
Urgent2 publicly disclosedUnsupported product
CVEs closed
28
None rated Critical
Exploited
0
None reported
Exploitation more likely
8
Microsoft's assessment
Highest EPSS
0.5638
99th percentile
Priority of the 28 CVEs
Patch now 0
Urgent 8
High 14
Routine 6
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2022-23253 | Windows Point-to-Point Tunneling Protocol | Denial of Service | 6.5 | 0.5638 | More likely |
| Urgent | CVE-2022-24502 | Windows HTML Platform | Security Feature Bypass | 4.3 | 0.3306 | More likely |
| Urgent | CVE-2022-21990 | Windows Remote Desktop | Remote Code Execution | 8.8 | 0.1884 | DisclosedMore likely |
| Urgent | CVE-2022-23299 | Windows PDEV | Elevation of Privilege | 7.8 | 0.0762 | More likely |
| Urgent | CVE-2022-23286 | Windows Cloud Files Mini Filter Driver | Elevation of Privilege | 7.0 | 0.0430 | More likely |
| Urgent | CVE-2022-24507 | Windows Ancillary Function Driver for WinSock | Elevation of Privilege | 7.8 | 0.0387 | More likely |
| Urgent | CVE-2022-24508 | Windows SMB Server | Remote Code Execution | 8.8 | 0.0255 | More likely |
| Urgent | CVE-2022-23294 | Windows Event Tracing | Remote Code Execution | 8.8 | 0.0230 | More likely |
| High | CVE-2022-23284 | Windows Print Spooler Components | Elevation of Privilege | 7.2 | 0.0317 | Exploitation Less Likely |
| High | CVE-2022-24460 | Tablet Windows User Interface | Elevation of Privilege | 7.0 | 0.0201 | Exploitation Less Likely |
| High | CVE-2022-21967 | XBox | Elevation of Privilege | 7.0 | 0.0068 | Exploitation Less Likely |
| High | CVE-2022-23293 | Windows Fast FAT Driver | Elevation of Privilege | 7.8 | 0.0067 | Exploitation Less Likely |
| High | CVE-2022-23296 | Windows Installer | Elevation of Privilege | 7.8 | 0.0067 | Exploitation Less Likely |
| High | CVE-2022-23291 | Windows DWM Core Library | Elevation of Privilege | 7.8 | 0.0064 | Exploitation Less Likely |
| High | CVE-2022-24459 | Windows Fax and Scan Service | Elevation of Privilege | 7.8 | 0.0064 | DisclosedExploitation Less Likely |
| High | CVE-2022-23290 | Windows COM | Elevation of Privilege | 7.8 | 0.0063 | Exploitation Less Likely |
| High | CVE-2022-24454 | Windows Security Support Provider Interface | Elevation of Privilege | 7.8 | 0.0063 | Exploitation Less Likely |
| High | CVE-2022-23287 | Windows ALPC | Elevation of Privilege | 7.0 | 0.0058 | Exploitation Less Likely |
| High | CVE-2022-23298 | Windows Kernel | Elevation of Privilege | 7.0 | 0.0058 | Exploitation Less Likely |
| High | CVE-2022-24525 | Windows Update Stack | Elevation of Privilege | 7.0 | 0.0044 | Exploitation Less Likely |
| High | CVE-2022-23283 | Windows ALPC | Elevation of Privilege | 7.0 | 0.0039 | Exploitation Less Likely |
| High | CVE-2022-24505 | Windows ALPC | Elevation of Privilege | 7.0 | 0.0036 | Exploitation Less Likely |
| Routine | CVE-2022-22010 | Microsoft Windows Codecs Library | Information Disclosure | 4.4 | 0.0263 | Exploitation Less Likely |
| Routine | CVE-2022-21977 | Microsoft Windows Codecs Library | Information Disclosure | 3.3 | 0.0253 | Exploitation Less Likely |
| Routine | CVE-2022-24503 | Windows Remote Desktop | Information Disclosure | 5.4 | 0.0244 | Exploitation Less Likely |
Showing 1 to 25 of 28
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.