Microsoft Starts 2022 with 97 CVEs in January Patch Tuesday
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-22947 | When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and… | 5.9 | 3% | PoC | |
| CVE-2021-36976 | libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block) | 6.5 | 3% | ||
CVE-2022-21874+2 related CVEs | Windows Security Center API Remote Code Execution Vulnerability | 9.8 group max | 2% | ||
| CVE-2022-21919 | Local Privilege Escalation in Microsoft Windows User Profile Service | 7.0 | 3% | KEV | KEV |
From the original article
2 min read at infosecurity-magazine.com
Microsoft began the year by publishing fixes for nearly a century of vulnerabilities, nine of which were rated critical and six of which were publicly disclosed. The Windows OS updates issued this month will fix all of the known bugs, according to Ivanti VP of product management, Chris Goettl.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.