Microsoft Patch Tuesday, September 2022: the CVEs

Microsoft Patch Tuesday September 2022: the CVEs Microsoft published on 13 September 2022, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Aug 2022, Jul 2022, Jun 2022, May 2022, Apr 2022, Mar 2022, Feb 2022, Jan 2022, Dec 2021, Nov 2021, Oct 2021, Sep 2021. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 7.3CVE-2022-38020EPSS 1.1%2022-09-13

   Visual Studio Code Elevation of Privilege Vulnerability

2. 7.8CVE-2022-38019EPSS 0.9%2022-09-13

   AV1 Video Extension Remote Code Execution Vulnerability

3. 7.5CVE-2022-38013EPSS 4.3%2022-09-13

   .NET Core and Visual Studio Denial of Service Vulnerability

4. 7.7CVE-2022-38012EPSS 0.9%2022-09-13

   Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

5. 7.3CVE-2022-38011EPSS 0.9%2022-09-13

   Raw Image Extension Remote Code Execution Vulnerability

6. 7.8CVE-2022-38010EPSS 0.9%2022-09-13

   Microsoft Office Visio Remote Code Execution Vulnerability

7. 8.8CVE-2022-38009EPSS 2.2%2022-09-13

   Microsoft SharePoint Server Remote Code Execution Vulnerability

8. 8.8CVE-2022-38008EPSS 2.1%2022-09-13

   Microsoft SharePoint Server Remote Code Execution Vulnerability

9. 7.8CVE-2022-38007EPSS 0.7%2022-09-13

   Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability

10. 6.5CVE-2022-38006EPSS 2.3%2022-09-13

    Windows Graphics Component Information Disclosure Vulnerability

11. 7.8CVE-2022-38005EPSS 0.9%2022-09-13

    Windows Print Spooler Elevation of Privilege Vulnerability

12. 7.8CVE-2022-38004EPSS 1.1%2022-09-13

    Windows Fax Service Remote Code Execution Vulnerability

13. 7.8CVE-2022-37969KEVEPSS 28%2022-09-13

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

14. 7.8CVE-2022-37964EPSS 1.1%2022-09-13

    Windows Kernel Elevation of Privilege Vulnerability

15. 7.8CVE-2022-37963EPSS 1.1%2022-09-13

    Microsoft Office Visio Remote Code Execution Vulnerability

16. 7.8CVE-2022-37962EPSS 1.4%2022-09-13

    Microsoft PowerPoint Remote Code Execution Vulnerability

17. 8.8CVE-2022-37961EPSS 52%2022-09-13

    Microsoft SharePoint Server Remote Code Execution Vulnerability

18. 6.5CVE-2022-37959EPSS 2.4%2022-09-13

    Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability

19. 8.1CVE-2022-37958EPSS 86%2022-09-13

    SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

20. 7.8CVE-2022-37957EPSS 14%2022-09-13

    Windows Kernel Elevation of Privilege Vulnerability

21. 7.8CVE-2022-37956EPSS 1.4%2022-09-13

    Windows Kernel Elevation of Privilege Vulnerability

22. 7.8CVE-2022-37955EPSS 2.2%2022-09-13

    Windows Group Policy Elevation of Privilege Vulnerability

23. 7.8CVE-2022-37954EPSS 46%2022-09-13

    DirectX Graphics Kernel Elevation of Privilege Vulnerability

24. 8.8CVE-2022-35841EPSS 3.7%2022-09-13

    Windows Enterprise App Management Service Remote Code Execution Vulnerability

25. 8.8CVE-2022-35840EPSS 2.2%2022-09-13

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

26. 7.5CVE-2022-35838EPSS 2.7%2022-09-13

    HTTP V3 Denial of Service Vulnerability

27. 6.5CVE-2022-35837EPSS 2.6%2022-09-13

    Windows Graphics Component Information Disclosure Vulnerability

28. 8.8CVE-2022-35836EPSS 2.2%2022-09-13

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

29. 8.8CVE-2022-35835EPSS 2.2%2022-09-13

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

30. 8.8CVE-2022-35834EPSS 2.2%2022-09-13

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

31. 7.5CVE-2022-35833EPSS 3.1%2022-09-13

    Windows Secure Channel Denial of Service Vulnerability

32. 5.5CVE-2022-35832EPSS 0.9%2022-09-13

    Windows Event Tracing Denial of Service Vulnerability

33. 5.5CVE-2022-35831EPSS 0.9%2022-09-13

    Windows Remote Access Connection Manager Information Disclosure Vulnerability

34. 8.1CVE-2022-35830EPSS 1.8%2022-09-13

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

35. 7.8CVE-2022-35828EPSS 0.5%2022-09-13

    Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability

36. 8.8CVE-2022-35823EPSS 55%2022-09-13

    Microsoft SharePoint Remote Code Execution Vulnerability

37. 8.8CVE-2022-35805EPSS 3.3%2022-09-13

    Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability

38. 7.8CVE-2022-35803EPSS 24%2022-09-13

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

39. 8.8CVE-2022-34734EPSS 2.8%2022-09-13

    Microsoft ODBC Driver Remote Code Execution Vulnerability

40. 8.8CVE-2022-34733EPSS 2.2%2022-09-13

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

41. 8.8CVE-2022-34732EPSS 2.8%2022-09-13

    Microsoft ODBC Driver Remote Code Execution Vulnerability

42. 8.8CVE-2022-34731EPSS 2.2%2022-09-13

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

43. 8.8CVE-2022-34730EPSS 2.8%2022-09-13

    Microsoft ODBC Driver Remote Code Execution Vulnerability

44. 7.8CVE-2022-34729EPSS 11%2022-09-13

    Windows GDI Elevation of Privilege Vulnerability

45. 5.5CVE-2022-34728EPSS 4.3%2022-09-13

    Windows Graphics Component Information Disclosure Vulnerability

46. 8.8CVE-2022-34727EPSS 2.8%2022-09-13

    Microsoft ODBC Driver Remote Code Execution Vulnerability

47. 8.8CVE-2022-34726EPSS 2.8%2022-09-13

    Microsoft ODBC Driver Remote Code Execution Vulnerability

48. 7.0CVE-2022-34725EPSS 5.5%2022-09-13

    Windows ALPC Elevation of Privilege Vulnerability

49. 7.5CVE-2022-34724EPSS 3.8%2022-09-13

    Windows DNS Server Denial of Service Vulnerability

50. 5.5CVE-2022-34723EPSS 1.1%2022-09-13

    Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability

51. 9.8CVE-2022-34722EPSS 3.0%2022-09-13

    Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

52. 9.8CVE-2022-34721EPSS 77%2022-09-13

    Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

53. 7.5CVE-2022-34720EPSS 3.7%2022-09-13

    Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

54. 7.8CVE-2022-34719EPSS 1.1%2022-09-13

    Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

55. 9.8CVE-2022-34718EPSS 57%2022-09-13

    Windows TCP/IP Remote Code Execution Vulnerability

56. 8.8CVE-2022-34700EPSS 3.8%2022-09-13

    Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability

57. 8.1CVE-2022-33679EPSS 12%2022-09-13

    Windows Kerberos Elevation of Privilege Vulnerability

58. 8.1CVE-2022-33647EPSS 2.3%2022-09-13

    Windows Kerberos Elevation of Privilege Vulnerability

59. 7.8CVE-2022-30200EPSS 1.3%2022-09-13

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

60. 8.2CVE-2022-30196EPSS 2.1%2022-09-13

    Windows Secure Channel Denial of Service Vulnerability

61. 7.3CVE-2022-30170EPSS 1.7%2022-09-13

    Windows Credential Roaming Service Elevation of Privilege Vulnerability

62. 7.8CVE-2022-26929EPSS 1.6%2022-09-13

    .NET Framework Remote Code Execution Vulnerability

63. 7.0CVE-2022-26928EPSS 0.8%2022-09-13

    Windows Photo Import API Elevation of Privilege Vulnerability