April 2022 Patch Tuesday forecast: Spring is in the air (and vulnerable)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2022-22675+1 related CVE | Out-of-Bounds Write in Apple macOS/iOS Kernel Allows Arbitrary Code Execution | 7.8 group max | 12% | KEV | KEV |
| CVE-2022-22965 | Unauthenticated RCE in VMware Spring Framework (Spring4Shell) - JDK 9+ Tomcat WARs | 9.8 | 100% | KEVPoC | KEV |
From the original article
3 min read at helpnetsecurity.com
March Patch Tuesday releases followed in the footsteps of February with low numbers of CVEs reported and resolved, and all updates rated as important except one critical update for Microsoft Exchange Server. Could April Patch Tuesday provide the deluge of critical updates we were expecting last month? Microsoft has clearly been busy working on security improvements in multiple arenas.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.