Exploit / PoCcritical
Surge in CVEs as Microsoft Fixes Exploited Zero Day Bugs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-30133 | Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability | 9.8 | 3% | ||
| CVE-2022-30134 | Microsoft Exchange Server Information Disclosure Vulnerability | 6.5 | 2% | ||
| CVE-2022-34713 | Remote Code Execution in Microsoft Windows Support Diagnostic Tool (MSDT) (DogWalk) | 7.8 | 68% | KEV | KEV |
| CVE-2022-35744 | Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability | 9.8 | 2% |
From the original article
2 min read at infosecurity-magazine.com
Microsoft addressed 121 vulnerabilities in the August 2022 Patch Tuesday update round, including two zero-day bugs. One of the zero-days, CVE-2022-34713 , has been dubbed “DogWalk” and is a remote code execution bug in the Microsoft Windows Support Diagnostic Tool (MSDT) which has already been observed in attacks in the wild.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.