A "light" February 2022 Patch Tuesday that should not be ignored
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2013-3900 | Authenticode Signature Verification Flaw in Microsoft WinVerifyTrust (RCE) | 5.5 | 45% | KEV | KEV |
| CVE-2022-21882 | Out-of-Bounds Write LPE in Microsoft Win32k on Windows 10/11 and Windows Server | 7.8 | 59% | KEVRansomware | KEV |
CVE-2022-21984+2 related CVEs | Windows DNS Server Remote Code Execution Vulnerability | 8.8 group max | 5% | ||
| CVE-2022-21999 | Local Privilege Escalation in Microsoft Windows Print Spooler (CISA KEV) | 7.8 | 41% | KEVRansomware | KEV |
| CVE-2022-23280 | Microsoft Outlook for Mac Security Feature Bypass Vulnerability | 5.3 | 2% |
From the original article
3 min read at helpnetsecurity.com
February 2022 Patch Tuesday is here and it’s all-around “light” – light in fixed CVE-numbered vulnerabilities (51), extremely light in critical fixes (50 are “important” and one is “moderate”), and light in exploited vulnerabilities (none of the vulnerabilities are listed as under active attack).
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.