Patch Tuesday Archive
Patch Tuesday April 2022
Total CVEs
129
Critical
10
Important
114
Exploited
1
Publicly Disclosed
1
All CVEs this month 129
| CVE | Title | Severity | CVSS | Product | Exploited | Disclosed | Diffed |
|---|---|---|---|---|---|---|---|
| CVE-2022-21983 | Win32 Stream Enumeration Remote Code Execution Vulnerability | Important | 7.5 |
Windows kernel32.dll | - | - | - |
| CVE-2022-23268 | Windows Hyper-V Denial of Service Vulnerability | Important | 6.5 |
Role: Windows Hyper-V | - | - | - |
| CVE-2022-23259 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | Critical | 8.8 |
Microsoft Dynamics | - | - | - |
| CVE-2022-23292 | Microsoft Power BI Spoofing Vulnerability | Important | 3.7 |
Power BI | - | - | - |
| CVE-2022-22008 | Windows Hyper-V Remote Code Execution Vulnerability | Critical | 7.8 |
Role: Windows Hyper-V | - | - | - |
| CVE-2022-22009 | Windows Hyper-V Remote Code Execution Vulnerability | Important | 7.8 |
Role: Windows Hyper-V | - | - | - |
| CVE-2022-23257 | Windows Hyper-V Remote Code Execution Vulnerability | Critical | 8.8 |
Role: Windows Hyper-V | - | - | - |
| CVE-2022-24521 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Common Log File System Driver | Yes | - | Yes |
| CVE-2022-24474 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Win32K | - | - | - |
| CVE-2022-24523 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | Moderate | 4.3 |
Microsoft Edge (Chromium-based) | - | - | - |
| CVE-2022-24475 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Important | 8.3 |
Microsoft Edge (Chromium-based) | - | - | - |
| CVE-2022-24484 | Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability | Important | 5.5 |
Windows Cluster Shared Volume (CSV) | - | - | - |
| CVE-2022-24533 | Remote Desktop Protocol Remote Code Execution Vulnerability | Important | 8 |
Windows RDP | - | - | - |
| CVE-2022-24485 | Win32 File Enumeration Remote Code Execution Vulnerability | Important | 7.5 |
Windows kernel32.dll | - | - | - |
| CVE-2022-24534 | Win32 Stream Enumeration Remote Code Execution Vulnerability | Important | 7.5 |
Windows kernel32.dll | - | - | - |
| CVE-2022-24486 | Windows Kerberos Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kerberos | - | - | - |
| CVE-2022-24544 | Windows Kerberos Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kerberos | - | - | - |
| CVE-2022-24496 | Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Local Security Authority Subsystem Service (LSASS) | - | - | - |
| CVE-2022-24545 | Windows Kerberos Remote Code Execution Vulnerability | Important | 8.1 |
Windows Kerberos | - | - | - |
| CVE-2022-24548 | Microsoft Defender Denial of Service Vulnerability | Important | 5.5 |
Windows Defender | - | - | - |
| CVE-2022-24482 | Windows ALPC Elevation of Privilege Vulnerability | Important | 7 |
Windows ALPC | - | - | - |
| CVE-2022-24530 | Windows Installer Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Installer | - | - | - |
| CVE-2022-24542 | Windows Win32k Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Win32K | - | - | - |
| CVE-2022-24494 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Ancillary Function Driver for WinSock | - | - | - |
| CVE-2022-24495 | Windows Direct Show - Remote Code Execution Vulnerability | Important | 7 |
Microsoft Windows Media Foundation | - | - | - |
| CVE-2022-24546 | Windows DWM Core Library Elevation of Privilege Vulnerability | Important | 7.8 |
Windows DWM Core Library | - | - | - |
| CVE-2022-24549 | Windows AppX Package Manager Elevation of Privilege Vulnerability | Important | 7.8 |
Windows AppX Package Manager | - | - | - |
| CVE-2022-24500 | Windows SMB Remote Code Execution Vulnerability | Critical | 8.8 |
Windows SMB | - | - | - |
| CVE-2022-24498 | Windows iSCSI Target Service Information Disclosure Vulnerability | Important | 6.5 |
Windows iSCSI Target Service | - | - | - |
| CVE-2022-24547 | Windows Digital Media Receiver Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Media | - | - | - |
| CVE-2022-24483 | Windows Kernel Information Disclosure Vulnerability | Important | 5.5 |
Windows Kernel | - | - | - |
| CVE-2022-24528 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | Important | 8.8 |
Windows Remote Procedure Call Runtime | - | - | - |
| CVE-2022-24550 | Windows Telephony Server Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Telephony Server | - | - | - |
| CVE-2022-24497 | Windows Network File System Remote Code Execution Vulnerability | Critical | 9.8 |
Windows Network File System | - | - | - |
| CVE-2022-24499 | Windows Installer Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Installer | - | - | - |
| CVE-2022-26784 | Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability | Important | 6.5 |
Windows Cluster Shared Volume (CSV) | - | - | - |
| CVE-2022-26785 | Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability | Important | 6.5 |
Role: Windows Hyper-V | - | - | - |
| CVE-2022-26783 | Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability | Important | 6.5 |
Role: Windows Hyper-V | - | - | - |
| CVE-2022-26786 | Windows Print Spooler Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Print Spooler Components | - | - | - |
| CVE-2022-26787 | Windows Print Spooler Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Print Spooler Components | - | - | - |
| CVE-2022-26788 | PowerShell Elevation of Privilege Vulnerability | Important | 7.8 |
Windows PowerShell | - | - | - |
| CVE-2022-26789 | Windows Print Spooler Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Print Spooler Components | - | - | - |
| CVE-2022-26790 | Windows Print Spooler Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Print Spooler Components | - | - | - |
| CVE-2022-26791 | Windows Print Spooler Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Print Spooler Components | - | - | - |
| CVE-2022-26792 | Windows Print Spooler Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Print Spooler Components | - | - | - |
| CVE-2022-26793 | Windows Print Spooler Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Print Spooler Components | - | - | - |
| CVE-2022-26794 | Windows Print Spooler Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Print Spooler Components | - | - | - |
| CVE-2022-26795 | Windows Print Spooler Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Print Spooler Components | - | - | - |
| CVE-2022-26796 | Windows Print Spooler Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Print Spooler Components | - | - | - |
| CVE-2022-26797 | Windows Print Spooler Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Print Spooler Components | - | - | - |
| CVE-2022-26798 | Windows Print Spooler Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Print Spooler Components | - | - | - |
| CVE-2022-26811 | Windows DNS Server Remote Code Execution Vulnerability | Important | 7.2 |
Role: DNS Server | - | - | - |
| CVE-2022-26812 | Windows DNS Server Remote Code Execution Vulnerability | Important | 7.2 |
Role: DNS Server | - | - | - |
| CVE-2022-26813 | Windows DNS Server Remote Code Execution Vulnerability | Important | 7.2 |
Role: DNS Server | - | - | - |
| CVE-2022-26891 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Important | 8.3 |
Microsoft Edge (Chromium-based) | - | - | - |
| CVE-2022-26894 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Important | 8.3 |
Microsoft Edge (Chromium-based) | - | - | - |
| CVE-2022-26895 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Important | 8.3 |
Microsoft Edge (Chromium-based) | - | - | - |
| CVE-2022-26896 | Azure Site Recovery Information Disclosure Vulnerability | Important | 4.9 |
Azure Site Recovery | - | - | - |
| CVE-2022-26897 | Azure Site Recovery Information Disclosure Vulnerability | Important | 4.9 |
Azure Site Recovery | - | - | - |
| CVE-2022-26898 | Azure Site Recovery Remote Code Execution Vulnerability | Important | 7.2 |
Azure Site Recovery | - | - | - |
| CVE-2022-26901 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Office Excel | - | - | - |
| CVE-2022-26904 | Windows User Profile Service Elevation of Privilege Vulnerability | Important | 7 |
Windows User Profile Service | - | Yes | - |
| CVE-2022-24473 | Microsoft Excel Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Office Excel | - | - | - |
| CVE-2022-26914 | Win32k Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Win32K | - | - | - |
| CVE-2022-26915 | Windows Secure Channel Denial of Service Vulnerability | Important | 7.5 |
Windows SChannel | - | - | - |
| CVE-2022-26916 | Windows Fax Compose Form Remote Code Execution Vulnerability | Important | 7.8 |
Windows Fax Compose Form | - | - | - |
| CVE-2022-26917 | Windows Fax Compose Form Remote Code Execution Vulnerability | Important | 7.8 |
Windows Fax Compose Form | - | - | - |
| CVE-2022-26918 | Windows Fax Compose Form Remote Code Execution Vulnerability | Important | 7.8 |
Windows Fax Compose Form | - | - | - |
| CVE-2022-26919 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | Critical | 8.1 |
Windows LDAP - Lightweight Directory Access Protocol | - | - | - |
| CVE-2022-26920 | Windows Graphics Component Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Graphics Component | - | - | - |
| CVE-2022-29146 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Moderate | 8.3 |
Microsoft Edge (Chromium-based) | - | - | - |
| CVE-2022-29147 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | Low | 3.1 |
Microsoft Edge (Chromium-based) | - | - | - |
| CVE-2022-24472 | Microsoft SharePoint Server Spoofing Vulnerability | Important | 8 |
Microsoft Office SharePoint | - | - | - |
| CVE-2022-24513 | Visual Studio Elevation of Privilege Vulnerability | Important | 7.8 |
Visual Studio | - | - | - |
| CVE-2022-24527 | Microsoft Endpoint Configuration Manager Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Endpoint Configuration Manager | - | - | - |
| CVE-2022-24479 | Connected User Experiences and Telemetry Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Feedback Hub | - | - | - |
| CVE-2022-24481 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Common Log File System Driver | - | - | - |
| CVE-2022-24487 | Windows Local Security Authority (LSA) Remote Code Execution Vulnerability | Important | 8.8 |
Windows Local Security Authority Subsystem Service (LSASS) | - | - | - |
| CVE-2022-24536 | Windows DNS Server Remote Code Execution Vulnerability | Important | 7.2 |
Role: DNS Server | - | - | - |
| CVE-2022-24488 | Windows Desktop Bridge Elevation of Privilege Vulnerability | Important | 7.8 |
Windows App Store | - | - | - |
| CVE-2022-24537 | Windows Hyper-V Remote Code Execution Vulnerability | Critical | 7.8 |
Role: Windows Hyper-V | - | - | - |
| CVE-2022-24489 | Cluster Client Failover (CCF) Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Cluster Client Failover | - | - | - |
| CVE-2022-24538 | Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability | Important | 6.5 |
Windows Cluster Shared Volume (CSV) | - | - | - |
| CVE-2022-24490 | Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability | Important | 8.1 |
Role: Windows Hyper-V | - | - | - |
| CVE-2022-24539 | Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability | Important | 8.1 |
Role: Windows Hyper-V | - | - | - |
| CVE-2022-24491 | Windows Network File System Remote Code Execution Vulnerability | Critical | 9.8 |
Windows Network File System | - | - | - |
| CVE-2022-24540 | Windows ALPC Elevation of Privilege Vulnerability | Important | 7 |
Windows ALPC | - | - | - |
| CVE-2022-24492 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | Important | 8.8 |
Windows Remote Procedure Call Runtime | - | - | - |
| CVE-2022-24541 | Windows Server Service Remote Code Execution Vulnerability | Critical | 8.8 |
Windows SMB | - | - | - |
| CVE-2022-24493 | Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Local Security Authority Server (lsasrv) | - | - | - |
| CVE-2022-26801 | Windows Print Spooler Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Print Spooler Components | - | - | - |
| CVE-2022-26802 | Windows Print Spooler Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Print Spooler Components | - | - | - |
| CVE-2022-26803 | Windows Print Spooler Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Print Spooler Components | - | - | - |
| CVE-2022-26807 | Windows Work Folder Service Elevation of Privilege Vulnerability | Important | 7 |
Windows Work Folder Service | - | - | - |
| CVE-2022-26808 | Windows File Explorer Elevation of Privilege Vulnerability | Important | 7 |
Windows File Explorer | - | - | - |
| CVE-2022-26809 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | Critical | 9.8 |
Windows Remote Procedure Call Runtime | - | - | - |
| CVE-2022-26810 | Windows File Server Resource Management Service Elevation of Privilege Vulnerability | Important | 7.8 |
Windows File Server | - | - | - |
| CVE-2022-26814 | Windows DNS Server Remote Code Execution Vulnerability | Important | 6.6 |
Active Directory Domain Services | - | - | - |
| CVE-2022-26815 | Windows DNS Server Remote Code Execution Vulnerability | Important | 7.2 |
Role: DNS Server | - | - | - |
| CVE-2022-26816 | Windows DNS Server Information Disclosure Vulnerability | Important | 6.5 |
Role: DNS Server | - | - | - |
| CVE-2022-26817 | Windows DNS Server Remote Code Execution Vulnerability | Important | 6.6 |
Active Directory Domain Services | - | - | - |
| CVE-2022-26818 | Windows DNS Server Remote Code Execution Vulnerability | Important | 6.6 |
Role: DNS Server | - | - | - |
| CVE-2022-26819 | Windows DNS Server Remote Code Execution Vulnerability | Important | 6.6 |
Role: DNS Server | - | - | - |
| CVE-2022-26820 | Windows DNS Server Remote Code Execution Vulnerability | Important | 6.6 |
Role: DNS Server | - | - | - |
| CVE-2022-26821 | Windows DNS Server Remote Code Execution Vulnerability | Important | 6.6 |
Role: DNS Server | - | - | - |
| CVE-2022-26822 | Windows DNS Server Remote Code Execution Vulnerability | Important | 6.6 |
Role: DNS Server | - | - | - |
| CVE-2022-26823 | Windows DNS Server Remote Code Execution Vulnerability | Important | 7.2 |
Role: DNS Server | - | - | - |
| CVE-2022-26824 | Windows DNS Server Remote Code Execution Vulnerability | Important | 7.2 |
Role: DNS Server | - | - | - |
| CVE-2022-26825 | Windows DNS Server Remote Code Execution Vulnerability | Important | 7.2 |
Role: DNS Server | - | - | - |
| CVE-2022-26826 | Windows DNS Server Remote Code Execution Vulnerability | Important | 7.2 |
Role: DNS Server | - | - | - |
| CVE-2022-26827 | Windows File Server Resource Management Service Elevation of Privilege Vulnerability | Important | 7 |
Windows File Server | - | - | - |
| CVE-2022-26828 | Windows Bluetooth Driver Elevation of Privilege Vulnerability | Important | 7 |
Microsoft Bluetooth Driver | - | - | - |
| CVE-2022-26829 | Windows DNS Server Remote Code Execution Vulnerability | Important | 6.6 |
Role: DNS Server | - | - | - |
| CVE-2022-26830 | DiskUsage.exe Remote Code Execution Vulnerability | Important | 7.5 |
diskusage | - | - | - |
| CVE-2022-26831 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability | Important | 7.5 |
Windows LDAP - Lightweight Directory Access Protocol | - | - | - |
| CVE-2022-26832 | .NET Framework Denial of Service Vulnerability | Important | 7.5 |
.NET Framework | - | - | - |
| CVE-2022-24543 | Windows Upgrade Assistant Remote Code Execution Vulnerability | Important | 7.8 |
Windows Upgrade Assistant | - | - | - |
| CVE-2022-24532 | HEVC Video Extensions Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Windows Codecs Library | - | - | - |
| CVE-2022-26903 | Windows Graphics Component Remote Code Execution Vulnerability | Important | 7.8 |
Microsoft Graphics Component | - | - | - |
| CVE-2022-26907 | Azure SDK for .NET Information Disclosure Vulnerability | Important | 5.3 |
Azure SDK | - | - | - |
| CVE-2022-26900 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Important | 8.3 |
Microsoft Edge (Chromium-based) | - | - | - |
| CVE-2022-26908 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Important | 8.3 |
Microsoft Edge (Chromium-based) | - | - | - |
| CVE-2022-26909 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Moderate | 8.3 |
Microsoft Edge (Chromium-based) | - | - | - |
| CVE-2022-26910 | Skype for Business and Lync Spoofing Vulnerability | Important | 5.3 |
Skype for Business | - | - | - |
| CVE-2022-26911 | Skype for Business Information Disclosure Vulnerability | Important | 6.5 |
Skype for Business | - | - | - |
| CVE-2022-26912 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Moderate | 8.3 |
Microsoft Edge (Chromium-based) | - | - | - |
| CVE-2022-26921 | Visual Studio Code Elevation of Privilege Vulnerability | Important | 7.3 |
Visual Studio Code | - | - | - |
| CVE-2022-26924 | YARP Denial of Service Vulnerability | Important | 7.5 |
YARP reverse proxy | - | - | - |
| CVE-2022-29144 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Important | 7.5 |
Microsoft Edge (Chromium-based) | - | - | - |
Threat Categories 5
| Threat Category | CVEs | Critical |
|---|---|---|
| Elevation of Privilege | 55 | - |
| Remote Code Execution | 47 | 10 |
| Information Disclosure | 13 | - |
| Denial of Service | 9 | - |
| Spoofing | 5 | - |
Affected Products 55
| Product | CVEs | Exploited |
|---|---|---|
| Role: DNS Server | 16 | - |
| Windows Print Spooler Components | 15 | - |
| Microsoft Edge (Chromium-based) | 12 | - |
| Role: Windows Hyper-V | 9 | - |
| Azure Site Recovery | 3 | - |
| Windows Cluster Shared Volume (CSV) | 3 | - |
| Windows Fax Compose Form | 3 | - |
| Windows Kerberos | 3 | - |
| Windows Remote Procedure Call Runtime | 3 | - |
| Windows Win32K | 3 | - |
| Windows kernel32.dll | 3 | - |
| Active Directory Domain Services | 2 | - |
| Microsoft Graphics Component | 2 | - |
| Microsoft Office Excel | 2 | - |
| Skype for Business | 2 | - |
| Windows ALPC | 2 | - |
| Windows Common Log File System Driver | 2 | 1 |
| Windows File Server | 2 | - |
| Windows Installer | 2 | - |
| Windows LDAP - Lightweight Directory Access Protocol | 2 | - |
| Windows Local Security Authority Subsystem Service (LSASS) | 2 | - |
| Windows Network File System | 2 | - |
| Windows SMB | 2 | - |
| .NET Framework | 1 | - |
| Azure SDK | 1 | - |
| Microsoft Bluetooth Driver | 1 | - |
| Microsoft Dynamics | 1 | - |
| Microsoft Endpoint Configuration Manager | 1 | - |
| Microsoft Local Security Authority Server (lsasrv) | 1 | - |
| Microsoft Office SharePoint | 1 | - |
| Microsoft Windows Codecs Library | 1 | - |
| Microsoft Windows Media Foundation | 1 | - |
| Power BI | 1 | - |
| Visual Studio | 1 | - |
| Visual Studio Code | 1 | - |
| Windows Ancillary Function Driver for WinSock | 1 | - |
| Windows App Store | 1 | - |
| Windows AppX Package Manager | 1 | - |
| Windows Cluster Client Failover | 1 | - |
| Windows DWM Core Library | 1 | - |
| Windows Defender | 1 | - |
| Windows Feedback Hub | 1 | - |
| Windows File Explorer | 1 | - |
| Windows Kernel | 1 | - |
| Windows Media | 1 | - |
| Windows PowerShell | 1 | - |
| Windows RDP | 1 | - |
| Windows SChannel | 1 | - |
| Windows Telephony Server | 1 | - |
| Windows Upgrade Assistant | 1 | - |
| Windows User Profile Service | 1 | - |
| Windows Work Folder Service | 1 | - |
| Windows iSCSI Target Service | 1 | - |
| YARP reverse proxy | 1 | - |
| diskusage | 1 | - |