Was Follina (CVE-2022-30190) not actually addressed in the June 2022 Security Patch?

Ben H 21 Reputation points
2022-09-06T23:59:29.34+00:00

Hello,

I have an issue with Server 2019 and the flow of information when using the MSRC Portal, as the Follina CVE (CVE-2022-30190) is not showing as part of the CVE's addressed in the June 2022 patch, even though it does say that the June 2022 Security Patch fixes the Vulnerability.

Please follow my steps:

Can someone please help here and confirm if the Follina CVE (CVE-2022-30190) patch was actually applied in the June Patch Tuesday release?

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,433 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,712 questions
0 comments No comments
{count} votes

Accepted answer
  1. Dave Patrick 426K Reputation points MVP
    2022-09-07T00:11:37.137+00:00

    Yes, the OOB June 14, 2022—KB5014692 (OS Build 17763.3046) patches it. They apparently just forgot to mention it in the KB

    Microsoft also patched the CVE-2022-30190 (Follina) vulnerability with the June 14, 2022 Windows security updates, but did not mention this in the KB articles in question
    https://borncity.com/win/2022/06/15/microsoft-schliet-follina-schwachstelle-cve-2022-30190-in-windows-mit-juni-2022-updates/

    --please don't forget to upvote and Accept as answer if the reply is helpful--


0 additional answers

Sort by: Most helpful