Monthly Patch
May 2022 Monthly Patch Release
11 May 2022
Microsoft has released security patches to address multiple vulnerabilities in their software and products.
The vulnerabilities that have been classified as Critical in severity are listed in the table below.
For the full list of security patches released by Microsoft, please refer to
https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2022-May
Critical vulnerabilities
CVE Number | CVE Name | Base Score | Reference |
|---|---|---|---|
CVE-2022-26937 | Windows Network File System Remote Code Execution Vulnerability | 9.8 | https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26937 |
CVE-2022-22017 | Remote Desktop Client Remote Code Execution Vulnerability | 8.8 | https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-22017 |
CVE-2022-26923 | Active Directory Domain Services Elevation of Privilege Vulnerability | 8.8 | https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26923 |
CVE-2022-23270 | Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 | https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-23270 |
CVE-2022-21972 | Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 | https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-21972 |
CVE-2022-26931 | Windows Kerberos Elevation of Privilege Vulnerability | 7.5 | https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26931 |
CVE-2022-29972 | Insight Software: CVE-2022-29972 Magnitude Simba Amazon Redshift ODBC Driver | TBD | https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29972 |