Microsoft Patch Tuesday – July 2022

Patch Tuesday is once again upon us. The July 2022 edition of Patch Tuesday brings us 84 fixes, with 4 rated as critical. We’ve listed the most important changes below.

⚡ TL;DR | Go Straight to the July 2022 Patch Tuesday Audit Report

Multiple SQL Server Products Go End-of-Life

Today marks the end-of-life for multiple SQL Server versions. SQL Server 2012 will officially go end-of-life today unless you have the extended security updates. For both SQL Server 2008 and SQL Server 2008 R2, the extended security updates are coming to an end today, unless you’re using the Azure version for which one more year of the extended security update is available. If you want a better overview of the SQL server end-of-life dates, you can find more and an audit in the SQL Server end-of-life blog post.

Windows Graphics Component RCE

The most severe vulnerability fixed this month is a remote code execution in the Windows Graphic component. CVE-2022-30221 got a CVSS rating of 8.8. Microsoft does list that exploitation is less likely and that in order to exploit the vulnerability, the attacker would need to convince the user to connect to a malicious RDP server.

Network File System RCE

The NFS vulnerability streak continues with CVE-2022-22029, a remote code execution with a CVSS score of 8.1. Similar to previous RCE vulnerabilities, an attacker needs to create an unauthenticated, specially crafted call to a NFS service to trigger a RCE.

Similar to previous NFS RCE vulnerabilities, you can use our NFS Server role audit to quickly identify your NFS servers.

Run the Patch Tuesday July 2022 Audit Report

To help manage your update progress, we’ve created the Patch Tuesday Audit Report that checks if the assets in your network are on the latest patch updates. The report has been color-coded to see which machines are up-to-date and which ones still need to be updated. As always, system administrators are urged to update their environment as soon as possible to ensure all endpoints are secured.

The Lansweeper Patch Tuesday report is automatically added to Lansweeper Cloud sites. Lansweeper Cloud is included in all our licenses without any additional cost and allows you to federate all your installations into one single view so all you need to do is look at one report, automatically added every patch Tuesday!

Patch Tuesday July 2022 CVE Codes & Titles

Receive the Latest Patch Tuesday Report for FREE Every Month

"*" señala los campos obligatorios

Email*

This field is hidden when viewing the form

EmailType

This field is hidden when viewing the form

IM – Conv Page – Processing

This field is hidden when viewing the form

IM – UTM_Campaign FC – Processing

This field is hidden when viewing the form

IM – UTM_Campaign LC – Processing

This field is hidden when viewing the form

IM – UTM_Content FC – Processing

This field is hidden when viewing the form

IM – UTM_Content LC – Processing

This field is hidden when viewing the form

IM – UTM_Medium FC – Processing

This field is hidden when viewing the form

IM – UTM_Medium LC – Processing

This field is hidden when viewing the form

IM – UTM_Source FC – Processing

This field is hidden when viewing the form

IM – UTM_Source LC – Processing

This field is hidden when viewing the form

IM – UTM_Term FC – Processing

This field is hidden when viewing the form

IM – UTM_Term LC – Processing

This field is hidden when viewing the form

gclid

This field is hidden when viewing the form

msclkid

Name

Este campo es un campo de validación y debe quedar sin cambios.

Count Me In Submit