VMSA-2022-0004:VMware ESXi, Workstation, and Fusion updates address multiple security vulnerabilities
Security advisory · VMware security advisories (Broadcom)
Assessment context
The vendor rates it critical
Weekly briefing
Week 6 · 7 Feb – 13 Feb 2022 UTC · assess the changes, then plan the next dates.
All dated changes in this period
14 source records · 11 groupsSecurityiOS and iPadOS / macOS
Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability
Apple · exploited, added to CISA KEV
CVE-2022-22620
Assessment context
CISA lists it as exploited
SecurityOracle WebLogic Server
Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
Oracle · exploited, added to CISA KEV
CVE-2017-10271
Assessment context
CISA lists it as exploited, including by ransomware
SecuritymacOS2 source records
Apple · exploited, added to CISA KEV · 2 entries
- Apple OS X Authentication Bypass Vulnerability
Apple · exploited, added to CISA KEV
CVE-2015-1130
Assessment context
CISA lists it as exploited
- Apple OS X Heap-Based Buffer Overflow Vulnerability
Apple · exploited, added to CISA KEV
CVE-2014-4404
Assessment context
CISA lists it as exploited
SecurityMicrosoft 365 Apps
Microsoft Office Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2017-0262
Assessment context
CISA lists it as exploited
SecurityMicrosoft HTTP.sys Remote Code Execution Vulnerability
Microsoft HTTP.sys Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2015-1635
Assessment context
CISA lists it as exploited
SecurityMicrosoft SMBv1 Remote Code Execution Vulnerability2 source records
Added to CISA KEV · 2 entries
- Microsoft SMBv1 Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2017-0144
Assessment context
CISA lists it as exploited
- Microsoft SMBv1 Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2017-0145
Assessment context
CISA lists it as exploited
SecurityMicrosoft SMBv3 Remote Code Execution Vulnerability
Microsoft SMBv3 Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2020-0796
Assessment context
CISA lists it as exploited
SecurityMicrosoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2017-0263
Assessment context
CISA lists it as exploited
SecurityWindows2 source records
Added to CISA KEV · 2 entries
- Microsoft Windows SAM Local Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2021-36934
Assessment context
CISA lists it as exploited
- Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2017-8464
Assessment context
CISA lists it as exploited
SecurityMicrosoft Security Update Guide
February 2022 Security Updates
MSRC release notes · Microsoft Security Update Guide
Assessment context
Monthly security release notes
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.