Microsoft · Security update · July 12, 2022

KB5015832: July 2022 cumulative update for Windows 10 1507

KB5015832, released July 12, 2022, fixes 36 CVEs across 2 products. One of them is being exploited (CVE-2022-22047); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product
CVEs closed
36
2 rated Critical
Exploited
1
CVE-2022-22047
Exploitation more likely
3
Microsoft's assessment
Highest EPSS
0.3270
98th percentile

Priority of the 36 CVEs

Patch now 1 Urgent 5 High 20 Routine 10

Applies to

ProductBuild after install
Windows 10 for 32-bit Systems10240.19360
Windows 10 for x64-based Systems10240.19360

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2022-22047 Windows Client/Server Runtime SubsystemElevation of Privilege7.8 0.1877 KEVExploited
Urgent CVE-2022-22034 Microsoft Graphics ComponentElevation of Privilege7.8 0.0625 More likely
Urgent CVE-2022-30220 Windows StorageElevation of Privilege7.8 0.0520 More likely
Urgent CVE-2022-30202 Windows Advanced Local Procedure CallElevation of Privilege7.0 0.0447 More likely
Urgent CVE-2022-22038 Windows Remote Procedure Call RuntimeRemote Code Execution8.1 0.0252 Exploitation Less Likely
Urgent CVE-2022-30221 Microsoft Graphics ComponentRemote Code Execution8.8 0.0212 Exploitation Less Likely
High CVE-2022-22025 Windows IISDenial of Service7.5 0.3270 Exploitation Less Likely
High CVE-2022-30209 Windows IISElevation of Privilege7.4 0.0256 Exploitation Less Likely
High CVE-2022-22037 Windows Advanced Local Procedure CallElevation of Privilege7.5 0.0250 Exploitation Less Likely
High CVE-2022-22027 Role: Windows Fax ServiceRemote Code Execution7.8 0.0223 Exploitation Less Likely
High CVE-2022-30206 Windows Print Spooler ComponentsElevation of Privilege7.8 0.0222 Exploitation Less Likely
High CVE-2022-22024 Role: Windows Fax ServiceRemote Code Execution7.8 0.0211 Exploitation Less Likely
High CVE-2022-30211 Windows Point-to-Point Tunneling ProtocolRemote Code Execution7.5 0.0207 Exploitation Less Likely
High CVE-2022-22040 Windows IISDenial of Service7.3 0.0150 Exploitation Less Likely
High CVE-2022-30203 Windows Boot ManagerSecurity Feature Bypass7.4 0.0150 Exploitation Less Likely
High CVE-2022-22049 Windows Client/Server Runtime SubsystemElevation of Privilege7.8 0.0106 Exploitation Less Likely
High CVE-2022-22026 Windows Client/Server Runtime SubsystemElevation of Privilege8.8 0.0102 Exploitation Less Likely
High CVE-2022-22022 Windows Print Spooler ComponentsElevation of Privilege7.1 0.0078 Exploitation Less Likely
High CVE-2022-30226 Windows Print Spooler ComponentsElevation of Privilege7.1 0.0078 Exploitation Less Likely
High CVE-2022-22043 Windows Fast FAT DriverDenial of Service7.8 0.0072 Exploitation Less Likely
High CVE-2022-22031 Windows Credential GuardElevation of Privilege7.8 0.0071 Exploitation Less Likely
High CVE-2022-22050 Windows Fax and Scan ServiceElevation of Privilege7.8 0.0063 Exploitation Less Likely
High CVE-2022-30225 Windows MediaElevation of Privilege7.1 0.0056 Exploitation Less Likely
High CVE-2022-22045 Windows MediaElevation of Privilege7.8 0.0055 Exploitation Less Likely
High CVE-2022-30224 Windows Advanced Local Procedure CallElevation of Privilege7.0 0.0051 Exploitation Less Likely
Showing 1 to 25 of 36 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.