Vulnerabilitycritical
Microsoft February 2022 Patch Tuesday security updates fix a zero
- CVEs
- CVE-2022-21989CVE-2022-23256CVE-2022-21986CVE-2022-21957CVE-2022-23272CVE-2022-23271CVE-2022-23273CVE-2022-23274CVE-2022-23269CVE-2022-0469CVE-2022-0467CVE-2022-23261CVE-2022-0453CVE-2022-23262CVE-2022-0468CVE-2022-0452CVE-2022-23263CVE-2022-0462CVE-2022-0461CVE-2022-0460CVE-2022-0465CVE-2022-0464CVE-2022-0463CVE-2022-0459CVE-2022-0455CVE-2022-0454CVE-2022-0466CVE-2022-0458CVE-2022-0457CVE-2022-0456CVE-2022-0470CVE-2022-22004CVE-2022-22003CVE-2022-23252CVE-2022-22716CVE-2022-23280CVE-2022-21987CVE-2022-21968CVE-2022-22005CVE-2022-21988CVE-2022-23255CVE-2022-21965CVE-2022-21844CVE-2022-21927CVE-2022-21926CVE-2022-22709CVE-2022-23254CVE-2022-21974CVE-2022-21984CVE-2022-21995CVE-2022-22712CVE-2022-23276CVE-2022-21991CVE-2022-22000CVE-2022-22710CVE-2022-21981CVE-2022-21998CVE-2022-21994
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-0452 | Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML… | 9.6 group max | <1% | ||
CVE-2022-21844+2 related CVEs | HEVC Video Extensions Remote Code Execution Vulnerability | 7.8 | 2% | ||
| CVE-2022-21957 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | 7.2 | 3% | ||
| CVE-2022-21965 | Microsoft Teams Denial of Service Vulnerability | 7.5 | 3% | ||
CVE-2022-22005+2 related CVEs | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 group max | 16% | ||
| CVE-2022-21984 | Windows DNS Server Remote Code Execution Vulnerability | 8.8 group max | 5% | ||
| CVE-2022-21986 | .NET Denial of Service Vulnerability | 7.5 | 4% | ||
CVE-2022-21988+4 related CVEs | Microsoft Office Visio Remote Code Execution Vulnerability | 7.8 group max | 3% | ||
| CVE-2022-21991 | Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability | 8.1 | 2% | ||
| CVE-2022-22709 | VP9 Video Extensions Remote Code Execution Vulnerability | 7.8 | 2% | ||
| CVE-2022-23254 | Microsoft Power BI Information Disclosure Vulnerability | 4.9 | 3% | ||
| CVE-2022-23255 | Microsoft OneDrive for Android Security Feature Bypass Vulnerability | 5.9 | <1% | ||
| CVE-2022-23256 | Azure Data Explorer Spoofing Vulnerability | 4.3 | 2% | ||
CVE-2022-23263+2 related CVEs | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | 7.7 group max | <1% | ||
CVE-2022-23274+4 related CVEs | Microsoft Dynamics GP Remote Code Execution Vulnerability | 8.8 group max | 2% | ||
| CVE-2022-23276 | SQL Server for Linux Containers Elevation of Privilege Vulnerability | 7.8 | <1% | ||
| CVE-2022-23280 | Microsoft Outlook for Mac Security Feature Bypass Vulnerability | 5.3 | 2% |
From the original article
5 min read at securityaffairs.com
Microsoft February 2022 Patch Tuesday security updates addressed 51 flaws in multiple products including Microsoft Windows and Windows Components, Azure Data Explorer, Kestrel Web Server, Microsoft Edge (Chromium-based), Windows Codecs Library, Microsoft Dynamics, Microsoft Dynamics GP, Microsoft Office and Office Components, Windows Hyper-V Server, SQL Server, Visual Studio Code, and Microsoft Teams.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.