Weekly briefing

Coming up4

1. 8Mar

   Patch TuesdayScheduled for 8 Mar 2022

   Patch Tuesday, 8 March 2022

   The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

2. 17Mar

   CISA KEV deadlineDue 17 Mar 2022

   Microsoft Exchange Server Privilege Escalation Vulnerability

   CVE-2018-8581

   Same day: CISA KEV deadline: Microsoft Excel Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Installer Privilege Escalation Vulnerability

3. 24Mar

   CISA KEV deadlineDue 24 Mar 2022

   Microsoft Windows Privilege Escalation Vulnerability

   CVE-2002-0367

   Same day: CISA KEV deadline: Microsoft Windows Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Improper Input Validation Vulnerability; CISA KEV deadline: Microsoft Excel Featheader Record Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Windows Kernel Exception Handler Vulnerability; CISA KEV deadline: Microsoft Office Stack-based Buffer Overflow Vulnerability; CISA KEV deadline: Microsoft Forefront TMG Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Windows Kernel Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Office Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Win32k Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft ATM Font Driver Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft PowerPoint Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Office Malformed EPS File Vulnerability; CISA KEV deadline: Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Office Security Feature Bypass Vulnerability; CISA KEV deadline: Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Office Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Office Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

4. 5Apr

   CISA KEV deadlineDue 5 Apr 2022

   Microsoft Win32k Memory Corruption Vulnerability

   CVE-2015-2546

   Same day: CISA KEV deadline: Microsoft Windows Kernel Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Transaction Manager Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Win32k Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Task Scheduler Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability