The Microsoft May 2022 security updates have been released and consist of 74 CVEs. Of these CVEs, 7 are rated critical, 65 rated important and 1 low in severity. At the time of release, one is listed as publicly known and under active exploit and two others are publicly known.
The security updates apply to the following products, features, and roles: .NET and Visual Studio, Microsoft Exchange Server, Microsoft Graphics Component, Microsoft Local Security Authority Server (lsasrv), Microsoft Office, Microsoft Office Excel, Microsoft Office SharePoint, Microsoft Windows ALPC, Remote Desktop Client, Role: Windows Fax Service, Role: Windows Hyper-V, Self-hosted Integration Runtime, Tablet Windows User Interface, Visual Studio, Visual Studio Code, Windows Active Directory, Windows Address Book, Windows Authentication Methods, Windows BitLocker, Windows Cluster Shared Volume (CSV), Windows Failover Cluster Automation Server, Windows Kerberos, Windows Kernel, Windows LDAP - Lightweight Directory Access Protocol, Windows Media, Windows Network File System, Windows NTFS, Windows Point-to-Point Tunneling Protocol, Windows Print Spooler Components, Windows Push Notifications, Windows Remote Access Connection Manager, Windows Remote Desktop, Windows Remote Procedure Call Runtime, Windows Server Service, Windows Storage Spaces Controller, and Windows WLAN Auto Config Service.
See the KBs listed at the bottom of the page at
May 2022 Security Updates - Release Notes - Security Update Guide - Microsoft for information regarding known issues with the security updates as well as the CVEs with FAQs, Mitigations and/or Workarounds.
Important Note: Windows 10 Versions 1909 and 20H2 have reached the end of service and will no longer receive updates. The most current version of Windows 10 is 21H2.
Recommended Reading: See Dustin Childs review and analysis in
Zero Day Initiative -- The May 2022 Security Update Review.
