Microsoft has released May 2022 Patch Tuesday for all its products, including Windows 11 and Windows 11. The latest updates for Windows fix 75 bugs, including three zero-day exploits, two publicly exposed and one actively exploited.
Due to the nature of actively exploited zero-day exploits, it’s highly recommended that users download and install these Patch Tuesday updates immediately.
Before we share the download links, let’s discuss some details about the fixed vulnerabilities.
Fixed vulnerabilities
The following table lists down fixed vulnerabilities in each category:
| Category | No. of vulnerabilities fixed |
|---|---|
| Elevation of Privilege | 21 |
| Spoofing | 1 |
| Edge | 0 |
| Denial of Service | 6 |
| Remote Code Execution | 26 |
| Security Feature Bypass | 4 |
| Information Disclosure | 17 |
| Total | 75 |
Zero-day vulnerabilities
Zero-day vulnerability means that the vulnerability has been discovered and became public, with no official fix at the moment.
There are three zero-day vulnerabilities fixed in this May 2022 Patch Tuesday:
-
CVE-2022-22713 Hyper-V Denial of Service attack
Successful exploitation of this vulnerability could allow a Hyper-V guest to affect the functionality of the Hyper-V host. This is publicly exposed vulnerability, but is less likely to be exploited immediately.
-
CVE-2022-26925 PetitPotam NTLM relay attack
PetitPotam is an NTLM Relay attack used against Windows Domain Controllers or other Windows servers. This vulnerability will allow the attackers authenticate to the domain controller.
On NTLM-enabled networks, domain administrators must ensure that services that permit NTLM authentication use protections such as Extended Protection for Authentication (EPA) or signing features such as SMB signing in order to prevent NTLM Relay Attacks.
-
CVE-2022-29972 Magnitude Simba Amazon Redshift ODBC Driver
There is an argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver
Since these vulnerabilities have already been exposed, hackers will scan the web for vulnerable systems and may target unpatched systems at large scale. It is recommended all systems be patched with the latest Windows updates as soon as possible.
List of fixed vulnerabilities
Here is a list of all the fixed vulnerabilities for May 2022 Patch Tuesday:
| Software | CVE | Description | Severity |
|---|---|---|---|
| .NET and Visual Studio | CVE-2022-29117 | .NET and Visual Studio Denial of Service Vulnerability | Important |
| .NET and Visual Studio | CVE-2022-23267 | .NET and Visual Studio Denial of Service Vulnerability | Important |
| .NET and Visual Studio | CVE-2022-29145 | .NET and Visual Studio Denial of Service Vulnerability | Important |
| .NET Framework | CVE-2022-30130 | .NET Framework Denial of Service Vulnerability | Low |
| Azure SHIR | ADV220001 | Upcoming improvements to Azure Data Factory and Azure Synapse Pipeline infrastructure in response to CVE-2022-29972 | Critical |
| Microsoft Exchange Server | CVE-2022-21978 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Important |
| Microsoft Graphics Component | CVE-2022-26934 | Windows Graphics Component Information Disclosure Vulnerability | Important |
| Microsoft Graphics Component | CVE-2022-22011 | Windows Graphics Component Information Disclosure Vulnerability | Important |
| Microsoft Graphics Component | CVE-2022-29112 | Windows Graphics Component Information Disclosure Vulnerability | Important |
| Microsoft Graphics Component | CVE-2022-26927 | Windows Graphics Component Remote Code Execution Vulnerability | Important |
| Microsoft Local Security Authority Server (lsasrv) | CVE-2022-26925 | Windows LSA Spoofing Vulnerability | Important |
| Microsoft Office | CVE-2022-29107 | Microsoft Office Security Feature Bypass Vulnerability | Important |
| Microsoft Office Excel | CVE-2022-29109 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office Excel | CVE-2022-29110 | Microsoft Excel Remote Code Execution Vulnerability | Important |
| Microsoft Office SharePoint | CVE-2022-29108 | Microsoft SharePoint Server Remote Code Execution Vulnerability | Important |
| Microsoft Windows ALPC | CVE-2022-23279 | Windows ALPC Elevation of Privilege Vulnerability | Important |
| Remote Desktop Client | CVE-2022-26940 | Remote Desktop Protocol Client Information Disclosure Vulnerability | Important |
| Remote Desktop Client | CVE-2022-22017 | Remote Desktop Client Remote Code Execution Vulnerability | Critical |
| Role: Windows Fax Service | CVE-2022-29115 | Windows Fax Service Remote Code Execution Vulnerability | Important |
| Role: Windows Hyper-V | CVE-2022-22713 | Windows Hyper-V Denial of Service Vulnerability | Important |
| Role: Windows Hyper-V | CVE-2022-24466 | Windows Hyper-V Security Feature Bypass Vulnerability | Important |
| Role: Windows Hyper-V | CVE-2022-29106 | Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability | Important |
| Self-hosted Integration Runtime | CVE-2022-29972 | Insight Software: CVE-2022-29972 Magnitude Simba Amazon Redshift ODBC Driver | Critical |
| Tablet Windows User Interface | CVE-2022-29126 | Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability | Important |
| Visual Studio | CVE-2022-29148 | Visual Studio Remote Code Execution Vulnerability | Important |
| Visual Studio Code | CVE-2022-30129 | Visual Studio Code Remote Code Execution Vulnerability | Important |
| Windows Active Directory | CVE-2022-26923 | Active Directory Domain Services Elevation of Privilege Vulnerability | Critical |
| Windows Address Book | CVE-2022-26926 | Windows Address Book Remote Code Execution Vulnerability | Important |
| Windows Authentication Methods | CVE-2022-26913 | Windows Authentication Security Feature Bypass Vulnerability | Important |
| Windows BitLocker | CVE-2022-29127 | BitLocker Security Feature Bypass Vulnerability | Important |
| Windows Cluster Shared Volume (CSV) | CVE-2022-29122 | Windows Clustered Shared Volume Information Disclosure Vulnerability | Important |
| Windows Cluster Shared Volume (CSV) | CVE-2022-29135 | Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability | Important |
| Windows Cluster Shared Volume (CSV) | CVE-2022-29138 | Windows Clustered Shared Volume Elevation of Privilege Vulnerability | Important |
| Windows Cluster Shared Volume (CSV) | CVE-2022-29134 | Windows Clustered Shared Volume Information Disclosure Vulnerability | Important |
| Windows Cluster Shared Volume (CSV) | CVE-2022-29120 | Windows Clustered Shared Volume Information Disclosure Vulnerability | Important |
| Windows Cluster Shared Volume (CSV) | CVE-2022-29151 | Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability | Important |
| Windows Cluster Shared Volume (CSV) | CVE-2022-29123 | Windows Clustered Shared Volume Information Disclosure Vulnerability | Important |
| Windows Cluster Shared Volume (CSV) | CVE-2022-29150 | Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability | Important |
| Windows Failover Cluster Automation Server | CVE-2022-29102 | Windows Failover Cluster Information Disclosure Vulnerability | Important |
| Windows Kerberos | CVE-2022-26931 | Windows Kerberos Elevation of Privilege Vulnerability | Critical |
| Windows Kernel | CVE-2022-29142 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows Kernel | CVE-2022-29116 | Windows Kernel Information Disclosure Vulnerability | Important |
| Windows Kernel | CVE-2022-29133 | Windows Kernel Elevation of Privilege Vulnerability | Important |
| Windows LDAP – Lightweight Directory Access Protocol | CVE-2022-29141 | Windows LDAP Remote Code Execution Vulnerability | Important |
| Windows LDAP – Lightweight Directory Access Protocol | CVE-2022-22014 | Windows LDAP Remote Code Execution Vulnerability | Important |
| Windows LDAP – Lightweight Directory Access Protocol | CVE-2022-29137 | Windows LDAP Remote Code Execution Vulnerability | Important |
| Windows LDAP – Lightweight Directory Access Protocol | CVE-2022-29139 | Windows LDAP Remote Code Execution Vulnerability | Important |
| Windows LDAP – Lightweight Directory Access Protocol | CVE-2022-22013 | Windows LDAP Remote Code Execution Vulnerability | Important |
| Windows LDAP – Lightweight Directory Access Protocol | CVE-2022-22012 | Windows LDAP Remote Code Execution Vulnerability | Important |
| Windows LDAP – Lightweight Directory Access Protocol | CVE-2022-29128 | Windows LDAP Remote Code Execution Vulnerability | Important |
| Windows LDAP – Lightweight Directory Access Protocol | CVE-2022-29129 | Windows LDAP Remote Code Execution Vulnerability | Important |
| Windows LDAP – Lightweight Directory Access Protocol | CVE-2022-29130 | Windows LDAP Remote Code Execution Vulnerability | Important |
| Windows LDAP – Lightweight Directory Access Protocol | CVE-2022-29131 | Windows LDAP Remote Code Execution Vulnerability | Important |
| Windows Media | CVE-2022-29105 | Microsoft Windows Media Foundation Remote Code Execution Vulnerability | Important |
| Windows Media | CVE-2022-29113 | Windows Digital Media Receiver Elevation of Privilege Vulnerability | Important |
| Windows Media | CVE-2022-22016 | Windows PlayToManager Elevation of Privilege Vulnerability | Important |
| Windows Network File System | CVE-2022-26937 | Windows Network File System Remote Code Execution Vulnerability | Critical |
| Windows NTFS | CVE-2022-26933 | Windows NTFS Information Disclosure Vulnerability | Important |
| Windows Point-to-Point Tunneling Protocol | CVE-2022-23270 | Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | Critical |
| Windows Point-to-Point Tunneling Protocol | CVE-2022-21972 | Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | Critical |
| Windows Print Spooler Components | CVE-2022-29104 | Windows Print Spooler Elevation of Privilege Vulnerability | Important |
| Windows Print Spooler Components | CVE-2022-29132 | Windows Print Spooler Elevation of Privilege Vulnerability | Important |
| Windows Print Spooler Components | CVE-2022-29140 | Windows Print Spooler Information Disclosure Vulnerability | Important |
| Windows Print Spooler Components | CVE-2022-29114 | Windows Print Spooler Information Disclosure Vulnerability | Important |
| Windows Push Notifications | CVE-2022-29125 | Windows Push Notifications Apps Elevation of Privilege Vulnerability | Important |
| Windows Remote Access Connection Manager | CVE-2022-29103 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | Important |
| Windows Remote Access Connection Manager | CVE-2022-26930 | Windows Remote Access Connection Manager Information Disclosure Vulnerability | Important |
| Windows Remote Desktop | CVE-2022-22015 | Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability | Important |
| Windows Remote Procedure Call Runtime | CVE-2022-22019 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | Important |
| Windows Server Service | CVE-2022-26936 | Windows Server Service Information Disclosure Vulnerability | Important |
| Windows Storage Spaces Controller | CVE-2022-26932 | Storage Spaces Direct Elevation of Privilege Vulnerability | Important |
| Windows Storage Spaces Controller | CVE-2022-26939 | Storage Spaces Direct Elevation of Privilege Vulnerability | Important |
| Windows Storage Spaces Controller | CVE-2022-26938 | Storage Spaces Direct Elevation of Privilege Vulnerability | Important |
| Windows WLAN Auto Config Service | CVE-2022-29121 | Windows WLAN AutoConfig Service Denial of Service Vulnerability | Important |
| Windows WLAN Auto Config Service | CVE-2022-26935 | Windows WLAN AutoConfig Service Information Disclosure Vulnerability | Important |
You can check out the complete list of vulnerabilities here.
Download KB5013943 for Windows 11 Version 22H1 (OS Build 22000.675)
For the latest version of Windows 11, you can download KB5013943 and keep your system safe from all the vulnerabilities discussed above.
Apart from the bugfixes, there are a few improvements, highlights and known issues in KB5013943 for Windows 11.
-
Highlights
- Addresses security issues for your Windows operating system.
-
Improvements
- Addresses a known issue that might cause issues for some .NET Framework 3.5 apps or prevent those apps from opening. The affected apps use certain optional components in .NET Framework 3.5, such as Windows Communication Foundation (WCF) and Windows Workflow (WWF) components.
- Addresses a known issue that might cause your screen to flicker if you start your device in Safe Mode. Components that rely on explorer.exe, such as File Explorer, the Start menu, and the taskbar, might be affected and appear unstable.
-
Known Issues
- After installing the Windows updates released January 11, 2022 or later Windows versions on an affected version of Windows, recovery discs (CD or DVD) created by using the Backup and Restore (Windows 7) app in Control Panel might not start.
For more information, please visit Microsoft KB help page.
Download Links
2022-05 Cumulative Update for Windows 11 for x64-based Systems (KB5013943) [263.1 MB]
2022-05 Cumulative Update for Windows 11 for ARM64-based Systems (KB5013943) [335.6 MB]
All KB5013943 Updates from Microsoft Catalog
Download KB5013942 for Windows 10 20H2, 21H1 and 21H2 (OS Builds 19042.1706, 19043.1706, and 19044.1706)
With this update, Windows 10 20H2 and 1909 have reached the end of service. Users running these versions should upgrade to the latest Windows 10 21H2. Otherwise, users running Home and Pro editions of these Operating Systems will no longer get updates from Windows Update.
Apart from the bugfixes, the following changes have been made in KB5013942 for Windows 10.
Improvements and highlights
- This update contains various security improvements to internal OS functionality. No additional issues were documented for this release.
Windows 10 includes the same known issues as Windows 11.
Download Links
2022-05 Cumulative Update for Windows 10 Version 20H2 for x64-based Systems (KB5013942) [666.5 MB]
2022-05 Cumulative Update for Windows 10 Version 20H2 for x86-based Systems (KB5013942) [314.2 MB]
2022-05 Cumulative Update for Windows 10 Version 21H1 for x64-based Systems (KB5013942) [666.5 MB]
2022-05 Cumulative Update for Windows 10 Version 21H1 for x86-based Systems (KB5013942) [314.2 MB]
2022-05 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5013942) [650.4 MB]
2022-05 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5013942) [306.9 MB]
All KB5013942 for Windows 10 download links
At the end, we would highly recommend that you install these updates as soon as possible. If you have an Internet connected or Domain connected system, it can potentially be a target of hackers.
Secondly, if you are running Windows 10 20H2 or Windows 10 Version 1909, you should upgrade to the latest version as these versions will not get further updates from Microsoft.
Windows 11 Patch Tuesday History
| KB Article | OS Version | Build | Release Date | Significant Changes | Announcement |
| KB5032190 | 23H2, 22H2 | 226X1.2715 | 14-Nov-23 | Enable Moment 4 features, addresses zero-day vulnerabilities, introduces issues with Copilot and COLRv1. | Microsoft announcement of KB5032190 |
| KB5031354 | 22H2 | 22621.2428 | 10-Oct-23 | Introduces Copilot and Dev Drives, new voice access commands, improvements to Settings app and File Explorer | Microsoft announcement of KB5031354 |
| KB5030219 | 22H2 | 22621.2283 | 12-Sep-23 | Improved Search app, search flyout box on hover, easily tab through search results | Microsoft announcement of KB5030219 |
| KB5029263 | 22H2 | 22621.2134 | 8-Aug-23 | Addresses VPN issues, more accurate brightness levels, notifications more reliable | Microsoft Announcement of KB5029263 |
| KB5029253 | 21H2 | 22000.2295 | 8-Aug-23 | Addresses VPN issues, reliable notifications | Microsoft Announcement of KB5029253 |
| KB5028185 | 22H2 | 22621.1992 | 11-Jul-23 | Share local files with Outlook contacts, 78 vulnerabilities addresses | Microsoft Announcement of KB5028185 |
| KB5028182 | 21H2 | 22000.2176 | 11-Jul-23 | Announcement of some Windows 11 22H2 editions EOL, share local files with Outlook contacts | Microsoft Announcement of KB5028182 |
| KB5027231 | 22H2 | 22621.1848 | 13-Jun-23 | Fixes a known issue with 32-bit apps, addresses a Windows kernel information disclosure vulnerability | Microsoft Announcement of KB5027231 |
| KB5027223 | 21H2 | 22000.2057 | 13-Jun-23 | Fixes a known issue with 32-bit apps, addresses a Windows kernel information disclosure vulnerability | Microsoft Announcement of KB5027223 |
| KB5026372 | 22H2 | 22621.1702 | 9-May-23 | Option to get the latest non-security updates immediately, new animations in the Widgets icons | Microsoft Announcement of KB5026372 |
| KB5026368 | 21H2 | 22000.1936 | 9-May-23 | Addresses issues with LSASS and other fixes | Microsoft Announcement of KB5026368 |
| KB5025239 | 22H2 | 22621.1555 | 11-Apr-23 | Microsoft account notifications in the Start menu, the search box will be lighter in a custom color theme, and a plethora of fixes | Microsoft Announcement of KB5025239 |
| KB5025224 | 21H2 | 22000.1817 | 11-Apr-23 | Fixes known issues with kiosk devices | Microsoft Announcement of KB5025224 |
| KB5023706 | 22H2 | 22621.1413 | 14-Mar-23 | AI Bing search box, iOS linking, tabbed notepad, screen recording from Snipping Tool, redesigned Quick Assist | Microsoft Announcement of KB5023706 |
| KB5023698 | 21H2 | 22000.1696 | 14-Mar-23 | Phase three of DCOM hardening, other fixes | Microsoft Announcement of KB5023698 |
| KB5022845 | 22H2 | 22621.1265 | 14-Feb-23 | .NET Framework updates integrated into UUP-based feature updates | Microsoft Announcement of KB5022845 |
| KB5022836 | 21H2 | 22000.1574 | 14-Feb-23 | – Combines Windows Spotlight with Themes on the Personalization page – Multiple changes to the Accounts Settings page | Microsoft Announcement of KB5022836 |
| KB5022303 | 22H2 | 22621.1105 | 10-Jan-23 | – ODBC Connectivity with SQL Server fixed. – Local Session Manager security issues fixed | Microsoft Announcement of KB5022303 |
| KB5022287 | 21H2 | 22000.1455 | 10-Jan-23 | – ODBC Connectivity with SQL Server fixed. – Local Session Manager security issues fixed | Microsoft Announcement of KB5022287 |
| KB5021255 | 22H2 | 22621.963 | 13-Dec-22 | -UI discrepancies in Task Manager are fixed -DPAPI decryption issue is fixed | Microsoft Announcement of KB5021255 |
| KB5021234 | 21H2 | 22000.1335 | 13-Dec-22 | -UI discrepancies in Task Manager are fixed -DPAPI decryption issue is fixed | Microsoft Announcement of KB5021234 |
| KB5019980 | 22H2 | 22621.819 | 8-Nov-22 | Task Manager option added to taskbar’s context menu | Microsoft Announcement of KB5019980 |
| KB5019961 | 21H2 | 22000.1219 | 8-Nov-22 | Task Manager option added to taskbar’s context menu | Microsoft Announcement of KB5019961 |
