VMSA-2022-0002:VMware Workstation and Horizon Client for Windows updates address a denial-of-service vulnerability
Security advisory · VMware security advisories (Broadcom)
Weekly briefing
Week 2 · 10 Jan – 16 Jan 2022 UTC · assess the changes, then plan the next dates.
All dated changes in this period
10 source records · 9 groupsSecurityMicrosoft Security Update Guide
January 2022 Security Updates
MSRC release notes · Microsoft Security Update Guide
Assessment context
Monthly security release notes
SecurityFortinet2 source records
Fortinet · exploited, added to CISA KEV · 2 entries
- Fortinet FortiOS and FortiProxy Improper Authorization
Fortinet · exploited, added to CISA KEV
CVE-2018-13382
Assessment context
CISA lists it as exploited, including by ransomware
- Fortinet FortiOS and FortiProxy Out-of-bounds Write
Fortinet · exploited, added to CISA KEV
CVE-2018-13383
Assessment context
CISA lists it as exploited, including by ransomware
SecurityGoogle Chrome
Google Chrome Media Use-After-Free Vulnerability
Google · exploited, added to CISA KEV
CVE-2020-6572
Assessment context
CISA lists it as exploited
SecurityOracle WebLogic Server
Oracle WebLogic Server, Injection
Oracle · exploited, added to CISA KEV
CVE-2019-2725
Assessment context
CISA lists it as exploited, including by ransomware
SecurityPalo Alto Networks
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
Palo Alto Networks · exploited, added to CISA KEV
CVE-2019-1579
Assessment context
CISA lists it as exploited, including by ransomware
SecurityVMware vCenter Server
VMware vCenter Server Improper Access Control
VMware · exploited, added to CISA KEV
CVE-2021-22017
Assessment context
CISA lists it as exploited
SecurityMicrosoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2019-1458
Assessment context
CISA lists it as exploited
SecurityMicrosoft WinVerifyTrust function Remote Code Execution
Microsoft WinVerifyTrust function Remote Code Execution
Added to CISA KEV
CVE-2013-3900
Assessment context
CISA lists it as exploited
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.