Vulnerabilitycritical
First Patch Tuesday of 2022 Brings Fix for a Critical 'Wormable' Windows Vulnerability
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-22947 | When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and… | 5.9 | 3% | PoC | |
| CVE-2021-36976 | libarchive 3.4.1 through 3.5.1 has a use-after-free in copy_string (called from do_uncompress_block and process_block) | 6.5 | 3% | ||
| CVE-2022-21907 | HTTP Protocol Stack Remote Code Execution Vulnerability | 9.8 group max | 93% | ||
| CVE-2022-21840 | Microsoft Office Remote Code Execution Vulnerability | 8.8 | 3% | ||
CVE-2022-21969+2 related CVEs | Microsoft Exchange Server Remote Code Execution Vulnerability | 9.0 | 1% | ||
| CVE-2022-21919 | Local Privilege Escalation in Microsoft Windows User Profile Service | 7.0 | 3% | KEV | KEV |
From the original article
3 min read at thehackernews.com
Microsoft on Tuesday kicked off its first set of updates for 2022 by plugging 96 security holes across its software ecosystem, while urging customers to prioritize patching for what it calls a critical "wormable" vulnerability. Of the 96 vulnerabilities, nine are rated Critical and 89 are rated Important in severity, with six zero-day publicly known at the time of the release.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.