Microsoft Patch Tuesday, February 2022 Edition
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-21882 | Out-of-Bounds Write LPE in Microsoft Win32k on Windows 10/11 and Windows Server | 7.8 | 59% | KEVRansomware | KEV |
| CVE-2022-21989 | Windows Kernel Elevation of Privilege Vulnerability | 7.8 | 3% | ||
| CVE-2022-21996 | Win32k Elevation of Privilege Vulnerability | 7.8 | 3% | ||
| CVE-2022-22005 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | 16% |
From the original article
4 min read at krebsonsecurity.comMicrosoft today released software updates to plug security holes in its Windows operating systems and related software. This month’s relatively light patch batch is refreshingly bereft of any zero-day threats, or even scary critical vulnerabilities. But it does fix four dozen flaws, including several that Microsoft says will likely soon be exploited by malware or malcontents.
krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.