Microsoft · Security update · May 10, 2022

KB5013943: May 2022 cumulative update for Windows 11 21H2

KB5013943, released May 10, 2022, fixes 45 CVEs across 2 products. One of them is being exploited (CVE-2022-26925); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
45
4 rated Critical
Exploited
1
CVE-2022-26925
Exploitation more likely
6
Microsoft's assessment
Highest EPSS
0.7935
99th percentile

Priority of the 45 CVEs

Patch now 1 Urgent 8 High 23 Routine 13

Applies to

ProductBuild after install
Windows 11 version 21H2 for ARM64-based Systems22000.675
Windows 11 version 21H2 for x64-based Systems22000.675

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2022-26925 Microsoft Local Security Authority Server (lsasrv)Spoofing8.1 0.1048 KEVDisclosedExploited
Urgent CVE-2022-21972 Windows Point-to-Point Tunneling ProtocolRemote Code Execution8.1 0.7935 Exploitation Less Likely
Urgent CVE-2022-23270 Windows Point-to-Point Tunneling ProtocolRemote Code Execution8.1 0.7035 More likely
Urgent CVE-2022-22017 Remote Desktop ClientRemote Code Execution8.8 0.3711 More likely
Urgent CVE-2022-29104 Windows Print Spooler ComponentsElevation of Privilege7.8 0.1176 More likely
Urgent CVE-2022-23279 Windows ALPCElevation of Privilege7.0 0.0472 More likely
Urgent CVE-2022-26931 Windows KerberosElevation of Privilege7.5 0.0269 Exploitation Less Likely
Urgent CVE-2022-29114 Windows Print Spooler ComponentsInformation Disclosure5.5 0.0132 More likely
Urgent CVE-2022-29132 Windows Print Spooler ComponentsElevation of Privilege7.8 0.0071 More likely
High CVE-2022-32230 Windows SMBDenial of Servicen/a 0.0793 Exploitation Less Likely
High CVE-2022-26927 Microsoft Graphics ComponentRemote Code Execution8.8 0.0460 Exploitation Less Likely
High CVE-2022-22012 Windows LDAP - Lightweight Directory Access ProtocolRemote Code Execution9.8 0.0418 Exploitation Less Likely
High CVE-2022-29130 Windows LDAP - Lightweight Directory Access ProtocolRemote Code Execution9.8 0.0393 Exploitation Less Likely
High CVE-2022-29128 Windows LDAP - Lightweight Directory Access ProtocolRemote Code Execution8.8 0.0290 Exploitation Less Likely
High CVE-2022-29129 Windows LDAP - Lightweight Directory Access ProtocolRemote Code Execution8.8 0.0290 Exploitation Less Likely
High CVE-2022-29131 Windows LDAP - Lightweight Directory Access ProtocolRemote Code Execution8.8 0.0290 Exploitation Less Likely
High CVE-2022-29141 Windows LDAP - Lightweight Directory Access ProtocolRemote Code Execution8.8 0.0283 Exploitation Less Likely
High CVE-2022-26926 Windows Address BookRemote Code Execution7.8 0.0281 Exploitation Less Likely
High CVE-2022-22019 Windows Remote Procedure Call RuntimeRemote Code Execution8.8 0.0272 Exploitation Less Likely
High CVE-2022-22013 Windows LDAP - Lightweight Directory Access ProtocolRemote Code Execution8.8 0.0248 Exploitation Less Likely
High CVE-2022-22014 Windows LDAP - Lightweight Directory Access ProtocolRemote Code Execution8.8 0.0248 Exploitation Less Likely
High CVE-2022-29137 Windows LDAP - Lightweight Directory Access ProtocolRemote Code Execution8.8 0.0248 Exploitation Less Likely
High CVE-2022-26913 Windows Authentication MethodsSecurity Feature Bypass7.4 0.0246 Exploitation Less Likely
High CVE-2022-29139 Windows LDAP - Lightweight Directory Access ProtocolRemote Code Execution8.8 0.0243 Exploitation Less Likely
High CVE-2022-29115 Role: Windows Fax ServiceRemote Code Execution7.8 0.0241 Exploitation Less Likely
Showing 1 to 25 of 45 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.