Microsoft Releases Fix for New Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-22012 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | 9.8 group max | 4% | ||
CVE-2022-26809+2 related CVEs | Remote Procedure Call Runtime Remote Code Execution Vulnerability | 9.8 group max | 91% | ||
| CVE-2022-26925 | Spoofing Flaw in Windows LSA (CVE-2022-26925) Exploited Against Domain Controllers | 5.9 | 10% | KEV | KEV |
| CVE-2022-26937 | Windows Network File System Remote Code Execution Vulnerability | 9.8 | 76% | ||
| CVE-2022-29133 | Windows Kernel Elevation of Privilege Vulnerability | 8.8 | <1% | ||
| CVE-2022-29972 | An argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Redshift ODBC Driver (1.4.14 through… | 7.8 | 4% | ||
| CVE-2022-30129 | Visual Studio Code Remote Code Execution Vulnerability | 8.8 | 42% | PoC |
From the original article
3 min read at thehackernews.com
Microsoft on Tuesday rolled out fixes for as many as 74 security vulnerabilities , including one for a zero-day bug that's being actively exploited in the wild. Of the 74 issues, seven are rated Critical, 66 are rated Important, and one is rated low in severity. Two of the flaws are listed as publicly known at the time of release.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.