Patch Tuesday for August 2022 fixed actively exploited zero
- CVEs
- CVE-2022-34713CVE-2022-30133CVE-2022-35744CVE-2022-34691CVE-2022-30134CVE-2022-33646CVE-2022-21980CVE-2022-24477CVE-2022-24516CVE-2022-35752CVE-2022-35753CVE-2022-35804CVE-2022-34696CVE-2022-34702CVE-2022-34714CVE-2022-35745CVE-2022-35766CVE-2022-35767CVE-2022-35794CVE-2022-34716CVE-2022-34685CVE-2022-34686CVE-2022-30175CVE-2022-30176CVE-2022-34687CVE-2022-35773CVE-2022-35779CVE-2022-35806CVE-2022-35776CVE-2022-35802CVE-2022-35775CVE-2022-35780CVE-2022-35781CVE-2022-35782CVE-2022-35784CVE-2022-35785CVE-2022-35786CVE-2022-35788CVE-2022-35789CVE-2022-35790CVE-2022-35791CVE-2022-35799CVE-2022-35801CVE-2022-35807CVE-2022-35808CVE-2022-35809CVE-2022-35810CVE-2022-35811CVE-2022-35813
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2022-21980+3 related CVEs | Microsoft Exchange Server Elevation of Privilege Vulnerability | 8.0 group max | 2% | ||
| CVE-2022-30133 | Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability | 9.8 group max | 3% | ||
| CVE-2022-30175 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability | 7.8 group max | 1% | ||
| CVE-2022-33646 | Azure Batch Node Agent Elevation of Privilege Vulnerability | 7.0 | <1% | ||
| CVE-2022-34713 | Remote Code Execution in Microsoft Windows Support Diagnostic Tool (MSDT) (DogWalk) | 7.8 | 68% | KEV | KEV |
| CVE-2022-34716 | .NET Spoofing Vulnerability | 5.9 | 2% | ||
CVE-2022-35744+3 related CVEs | Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability | 9.8 group max | 2% | ||
| CVE-2022-35802 | Azure Site Recovery Elevation of Privilege Vulnerability | 8.1 group max | 2% | ||
| CVE-2022-35804 | SMB Client and Server Remote Code Execution Vulnerability | 8.8 | 3% |
From the original article
10 min read at securityaffairs.com
Microsoft Patch Tuesday security updates for August 2022 addressed a zero-day attack remote code execution vulnerability in Windows. Microsoft Patch Tuesday security updates for August 2022 addressed 118 CVEs in multiple products, including .
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.