Microsoft’s Final Patch Tuesday Fixes Follina Bug
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-30136 | Windows Network File System Remote Code Execution Vulnerability | 9.8 | 73% | ||
CVE-2022-30163+1 related CVE | Windows Hyper-V Remote Code Execution Vulnerability | 8.5 group max | 2% | ||
| CVE-2022-30190 | MSDT URL Protocol Remote Code Execution in Microsoft Windows (Follina) | 7.8 | 99% | KEVRansomwarePoC | KEV |
From the original article
2 min read at infosecurity-magazine.com
Microsoft has issued its last regular patch update round before introducing a new automated patching service, fixing over 50 CVEs, including a dangerous zero-day bug known as “Follina.” Also known by its official moniker, CVE-2022-30190, Follina is being exploited in the wild by state-backed actors and the operators behind Qakbot, which has links to ransomware groups.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.