CVE-2022-21985HighMicrosoft CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Microsoft security update for CVE-2022-21985 — Windows

Published
February 8, 2022
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2022-21985 →

📋 Microsoft's advisory

EchelonGraph does not copy Microsoft's advisory page: its FAQ and remediation text are not shown here. Read the advisory on https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21985. This page also shows what EchelonGraph holds for CVE-2022-21985, with the description from its CVE record, which the CVE Numbering Authority that assigned the CVE wrote: for a CVE Microsoft assigned, often in the words of Microsoft's own advisory.

🎯 Affected products42

  • Windows 10 Version 1607 for 32-bit Systems
  • Windows 10 Version 1607 for x64-based Systems
  • Windows 10 Version 1809 for 32-bit Systems
  • Windows 10 Version 1809 for ARM64-based Systems
  • Windows 10 Version 1809 for x64-based Systems
  • Windows 10 Version 1909 for 32-bit Systems
  • Windows 10 Version 1909 for ARM64-based Systems
  • Windows 10 Version 1909 for x64-based Systems
  • Windows 10 Version 20H2 for 32-bit Systems
  • Windows 10 Version 20H2 for ARM64-based Systems
  • Windows 10 Version 21H1 for 32-bit Systems
  • Windows 10 Version 21H1 for ARM64-based Systems
  • Windows 10 Version 21H1 for x64-based Systems
  • Windows 10 Version 21H2 for 32-bit Systems
  • Windows 10 Version 21H2 for ARM64-based Systems
  • Windows 10 Version 21H2 for x64-based Systems
  • Windows 10 for 32-bit Systems
  • Windows 10 for x64-based Systems
  • Windows 11 version 21H2 for ARM64-based Systems
  • Windows 11 version 21H2 for x64-based Systems
  • Windows 7 for 32-bit Systems Service Pack 1
  • Windows 7 for x64-based Systems Service Pack 1
  • Windows 8.1 for 32-bit systems
  • Windows 8.1 for x64-based systems
  • Windows RT 8.1
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
  • Windows Server 2008 for 32-bit Systems Service Pack 2
  • Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
  • Windows Server 2008 for x64-based Systems Service Pack 2
  • +12 more not shown

✅ Updates Microsoft lists: 15 KB articles and 2 other updates

19 rows: one per KB article or update, update type and fixed build. Their details are on Microsoft's advisory.

KB articleUpdateFixed build
KB5010351Security Update10.0.17763.2565
KB5010345Security Update10.0.18363.2094
KB5010342Security Update10.0.19043.1526
KB5010354Security Update10.0.20348.524
—Security Hotpatch Update10.0.20348.525
KB5010342Security Update10.0.19042.1526
KB5010386Security Update10.0.22000.493
KB5010342Security Update10.0.19044.1526
KB5010358Security Update10.0.10240.19204
KB5010359Security Update10.0.14393.4946
KB5010404Monthly Rollup6.1.7601.25860
KB5010422Security Only6.1.7601.25860
KB5010419Monthly Rollup6.3.9600.20269
KB5010395Security Only6.3.9600.20269
—Monthly Rollup6.3.9600.20269
KB5010384Monthly Rollup6.0.6003.21374
KB5010403Security Only6.0.6003.21372
KB5010392Monthly Rollup6.2.9200.23605
KB5010412Security Only6.2.9200.23605

🧭 EchelonGraph on CVE-2022-21985

EchelonGraph score
5.5 MEDIUM
CISA KEV
Not listed
Fix status
A fix is available — apply it.

Description from the CVE record (CVE.org), as published by its numbering authority

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Published by Microsoft Corporation, the CVE Numbering Authority that assigned CVE-2022-21985, in its CVE record at CVE.org; reused under the CVE Program's Terms of Use (its licence and MITRE's copyright notice are in our Terms of Service).

🔗 References (28)