VulnerabilitycriticalExploited in the wild

Microsoft Patch Tuesday for September 2022 — Snort rules and prominent vulnerabilities

Cisco Talosby Asheer MalhotraSep 13, 2022 · 18:01 UTC (Sep 13, 2022)2 min read2 · 1 read

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-34718 CVE-2022-37969 CVE-2022-34721 CVE-2022-34722 CVE-2022-35805 CVE-2022-34700 CVE-2022-37957 CVE-2022-35803 CVE-2022-37954 CVE-2022-34725 CVE-2022-34729

Tags: cve-2022-34718 cve-2022-37969 cve-2022-34721 cve-2022-34722 cve-2022-35805 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-34700 +1 related CVE CVE-2022-35805	Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability	8.8	3%		Sep 13, 2022
CVE-2022-34721 +7 related CVEs CVE-2022-34718 CVE-2022-34722 CVE-2022-37954 CVE-2022-35803 CVE-2022-37957 CVE-2022-34729 CVE-2022-34725	Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability	9.8 group max	79%		Sep 13, 2022
CVE-2022-37969	Out-of-bounds write flaw in Microsoft Windows CLFS driver enables privilege escalation	7.8	28%	KEVRansomware	Sep 13, 2022 KEV Sep 14, 2022

From the original article

2 min read at blog.talosintelligence.com

Microsoft released its monthly security update Tuesday, disclosing 64 vulnerabilities across the company’s hardware and software line, a sharp decline from the record number of issues Microsoft disclosed last month. September's security update features five critical vulnerabilities, 10 fewer than were included in last month’s Patch Tuesday.

Cisco Talos

By Asheer Malhotra · blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.