VulnerabilitycriticalExploited in the wild

April Records First Patch Tuesday of 2022 to Top 100 CVEs

Infosecurity Magazineby Phil MuncasterApr 13, 2022 · 09:00 UTC (Apr 13, 2022)1 min read2

Read at infosecurity-magazine.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-24521 CVE-2022-26904 CVE-2022-24491 CVE-2022-24497

Tags: cve-2022-24521 cve-2022-26904 cve-2022-24491 cve-2022-24497 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-24497 +1 related CVE CVE-2022-24491	Windows Network File System Remote Code Execution Vulnerability	9.8	35%		Apr 15, 2022
CVE-2022-24521 +1 related CVE CVE-2022-26904	Out-of-bounds Write Privilege Escalation in Microsoft Windows CLFS Driver	7.8 group max	7%	KEVRansomware	Apr 15, 2022 KEV Apr 13, 2022

From the original article

1 min read at infosecurity-magazine.com

Sysadmins will have a busy time ahead after Microsoft published fixes for over 100 CVEs this month, including two zero-day bugs. April’s Patch Tuesday saw patches released for 119 vulnerabilities in total. The two publicly disclosed prior to Tuesday were CVE-2022-24521 , a bug in the Windows Common Log File System Driver (CLFS) reported by the NSA.

Infosecurity Magazine

By Phil Muncaster · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.