Microsoft Patch Tuesday for Feb. 2022 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2022-22715+3 related CVEs | Named Pipe File System Elevation of Privilege Vulnerability | 7.8 group max | 13% | ||
| CVE-2022-21996 | Win32k Elevation of Privilege Vulnerability | 7.8 | 3% | ||
| CVE-2022-21999 | Local Privilege Escalation in Microsoft Windows Print Spooler (CISA KEV) | 7.8 | 41% | KEVRansomware | KEV |
| CVE-2022-22005 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | 16% |
From the original article
1 min read at blog.talosintelligence.com
Microsoft released its monthly security update Tuesday, disclosing 51 vulnerabilities across its large collection of hardware and software. None of the vulnerabilities disclosed this month are considered “critical,” an extreme rarity for the company’s Patch Tuesdays. Additionally, none of the issues Microsoft patched have been exploited in the wild to this point, nor have they been publicly disclosed.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.