WEEKLY BRIEFING · 7 FEB – 13 FEB 2022 · UTC
Full source inventory · public sources only
Week 6 sources
MSRC published February 2022 Security Updates. CISA added 8 Microsoft CVEs to its Known Exploited Vulnerabilities catalog. 1 Windows and security article from Microsoft blogs.
1MSRC release note
1Windows and security article
8Microsoft CVEs added to CISA KEV
Security to act on8
- CVE-2021-36934 — Microsoft Windows SAM Local Privilege Escalation VulnerabilityKEV 10 Feb
- CVE-2020-0796 — Microsoft SMBv3 Remote Code Execution VulnerabilityKEV 10 Feb
- CVE-2017-8464 — Microsoft Windows Shell (.lnk) Remote Code Execution VulnerabilityKEV 10 Feb
- CVE-2017-0263 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 10 Feb
- CVE-2017-0262 — Microsoft Office Remote Code Execution VulnerabilityKEV 10 Feb
- CVE-2017-0145 — Microsoft SMBv1 Remote Code Execution VulnerabilityKEV 10 Feb
- CVE-2017-0144 — Microsoft SMBv1 Remote Code Execution VulnerabilityKEV 10 Feb
- CVE-2015-1635 — Microsoft HTTP.sys Remote Code Execution VulnerabilityKEV 10 Feb
MSRC security releases1
Windows and security news1
Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.