QID 91906

Date Published: 2022-05-11

QID 91906: Microsoft Windows Storage Spaces Controller Multiple Vulnerabilities for May 2022

Microsoft releases the security update for Windows Cluster Shared Volume

The KB Articles associated with the update:
KB5013952
KB5013944
KB5013941
KB5013942

This QID checks for the file version of ntoskrnl.exe

The following versions of ntoskrnl.exe with their corresponding KBs are verified:
KB5013941-10.0.17763.2928
KB5013944-10.0.20348.707
KB5013952-10.0.14393.5125
KB5013942- 10.0.19041.1706

Successful exploit could compromise Confidentiality, Integrity and Availability

  • CVSS V3 rated as Critical - 8.2 severity.
  • CVSS V2 rated as High - 6.5 severity.
  • Solution
    Please refer to the KB5013952, KB5013944, KB5013942, KB5013941.

    CVEs related to QID 91906

    Software Advisories
    Advisory ID Software Component Link
    KB5013941 URL Logo support.microsoft.com/en-us/topic/may-10-2022-kb5013941-os-build-17763-2928-e84332a3-42bb-4d3c-9f6e-89db963230db
    KB5013942 URL Logo support.microsoft.com/en-us/topic/may-10-2022-kb5013942-os-builds-19042-1706-19043-1706-and-19044-1706-60b51119-85be-4a34-9e21-8954f6749504
    KB5013944 URL Logo support.microsoft.com/en-us/topic/may-10-2022-kb5013944-os-build-20348-707-05509703-187a-4d5b-97f5-8793dbb22991
    KB5013952 URL Logo support.microsoft.com/en-us/topic/may-10-2022-kb5013952-os-build-14393-5125-0bb9f7e6-0360-4162-8eab-108e28d3a090
    © CVE.report 2026 |

    Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

    CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

    Free CVE JSON API cve.report/api

    CVE.report and Source URL Uptime Status status.cve.report