Microsoft addresses 55 CVEs in its June 2022 Patch Tuesday release, including three critical flaws.

Microsoft’s June 2022 Patch Tuesday Addresses 55 CVEs (CVE-2022-30190)

Microsoft confirms remote code execution vulnerability in Microsoft Windows Support Diagnostic Tool that has been exploited in the wild since at least April.

CVE-2022-30190: Zero Click Zero Day in Microsoft Support Diagnostic Tool Exploited in the Wild

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights. Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability.

The remote Windows host is missing security update 5014710. It is, therefore, affected by multiple vulnerabilities

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30139,     CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

  - Windows Hyper-V Remote Code Execution Vulnerability (CVE-2022-30163)

  - Kerberos AppContainer Security Feature Bypass Vulnerability (CVE-2022-30164)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014678. It is, therefore, affected by multiple vulnerabilities

  - Windows Kerberos Elevation of Privilege Vulnerability (CVE-2022-30165)

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30139,     CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

  - Windows Hyper-V Remote Code Execution Vulnerability (CVE-2022-30163)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014746. It is, therefore, affected by multiple vulnerabilities

  - Windows Network File System Remote Code Execution Vulnerability (CVE-2022-30136)

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30141,     CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

  - Windows Hyper-V Remote Code Execution Vulnerability (CVE-2022-30163)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014699. It is, therefore, affected by multiple vulnerabilities:

  - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.     (CVE-2022-30166, CVE-2022-30165, CVE-2022-30160 CVE-2022-30154, CVE-2022-30151, CVE-2022-30150,      CVE-2022-30147, CVE-2022-30132, CVE-2022-30131)

  - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature     and perform unauthorized actions compromising the integrity of the system/application. (CVE-2022-30164)     
  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2022-30163, CVE-2022-30161, CVE-2022-30153, CVE-2022-30149,     CVE-2022-30146, CVE-2022-30145, CVE-2022-30143, CVE-2022-30142, CVE-2022-30141, CVE-2022-30140,     CVE-2022-30139,CVE-2022-30190)

The remote Windows host is missing security update 5014692. It is, therefore, affected by multiple vulnerabilities

  - Windows Network File System Remote Code Execution Vulnerability (CVE-2022-30136)

  - Windows Kerberos Elevation of Privilege Vulnerability (CVE-2022-30165)

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30139,     CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014702. It is, therefore, affected by multiple vulnerabilities

  - Windows Network File System Remote Code Execution Vulnerability (CVE-2022-30136)

  - Windows Kerberos Elevation of Privilege Vulnerability (CVE-2022-30165)

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30139,     CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014741. It is, therefore, affected by multiple vulnerabilities

  - Windows Network File System Remote Code Execution Vulnerability (CVE-2022-30136)

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30141,     CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

  - Windows Hyper-V Remote Code Execution Vulnerability (CVE-2022-30163)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014743. It is, therefore, affected by multiple vulnerabilities

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30141,     CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

  - Local Security Authority Subsystem Service Elevation of Privilege Vulnerability (CVE-2022-30166)

  - Windows Advanced Local Procedure Call Elevation of Privilege Vulnerability (CVE-2022-30160)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014742. It is, therefore, affected by multiple vulnerabilities

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30141,     CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

  - Windows Hyper-V Remote Code Execution Vulnerability (CVE-2022-30163)

  - Local Security Authority Subsystem Service Elevation of Privilege Vulnerability (CVE-2022-30166)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5014697. It is, therefore, affected by multiple vulnerabilities

  - Windows Kerberos Elevation of Privilege Vulnerability (CVE-2022-30165)

  - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (CVE-2022-30139,     CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-30161)

  - Windows Hyper-V Remote Code Execution Vulnerability (CVE-2022-30163)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
162206	KB5014710: Windows 10 LTS 1507 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	high
162205	KB5014678: Windows Server 2022 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	high
162202	KB5014746: Windows 8.1 and Windows Server 2012 R2 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	critical
162201	KB5014699: Windows 10 Version 20H2 / 21H1 / 21H2 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	high
162197	KB5014692: Windows 10 version 1809 / Windows Server 2019 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	critical
162196	KB5014702: Windows 10 Version 1607 and Windows Server 2016 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	critical
162194	KB5014741: Windows Server 2012 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	critical
162193	KB5014743: Windows Server 2008 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	high
162191	KB5014742: Windows 7 and Windows Server 2008 R2 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	high
162188	KB5014697: Windows 11 Security Update (June 2022)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2022-30190

high

Tenable Plugins

high

high

critical

high

critical

critical

critical

high

high

high