WEEKLY BRIEFING · 28 FEB – 6 MAR 2022 · UTC
Full source inventory · public sources only
Week 9 sources
No new MSRC release that week. CISA added 27 Microsoft CVEs to its Known Exploited Vulnerabilities catalog.
27Microsoft CVEs added to CISA KEV
Security to act on27
- CVE-2021-41379 — Microsoft Windows Installer Privilege Escalation VulnerabilityKEV 3 Mar
- CVE-2019-1297 — Microsoft Excel Remote Code Execution VulnerabilityKEV 3 Mar
- CVE-2018-8581 — Microsoft Exchange Server Privilege Escalation VulnerabilityKEV 3 Mar
- CVE-2017-8540 — Microsoft Malware Protection Engine Improper Restriction of Operations VulnerabilityKEV 3 Mar
- CVE-2017-11826 — Microsoft Office Remote Code Execution VulnerabilityKEV 3 Mar
- CVE-2017-0261 — Microsoft Office Use-After-Free VulnerabilityKEV 3 Mar
- CVE-2017-0001 — Microsoft Graphics Device Interface (GDI) Privilege Escalation VulnerabilityKEV 3 Mar
- CVE-2016-7262 — Microsoft Office Security Feature Bypass VulnerabilityKEV 3 Mar
- CVE-2016-7193 — Microsoft Office Memory Corruption VulnerabilityKEV 3 Mar
- CVE-2016-0099 — Microsoft Windows Secondary Logon Service Privilege Escalation VulnerabilityKEV 3 Mar
- CVE-2015-2545 — Microsoft Office Malformed EPS File VulnerabilityKEV 3 Mar
- CVE-2015-2424 — Microsoft PowerPoint Memory Corruption VulnerabilityKEV 3 Mar
- CVE-2015-2387 — Microsoft ATM Font Driver Privilege Escalation VulnerabilityKEV 3 Mar
- CVE-2015-1701 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 3 Mar
- CVE-2015-1642 — Microsoft Office Memory Corruption VulnerabilityKEV 3 Mar
- CVE-2014-4114 — Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution VulnerabilityKEV 3 Mar
- CVE-2013-5065 — Microsoft Windows Kernel Privilege Escalation VulnerabilityKEV 3 Mar
- CVE-2013-3897 — Microsoft Internet Explorer Use-After-Free VulnerabilityKEV 3 Mar
- CVE-2013-1347 — Microsoft Internet Explorer Remote Code Execution VulnerabilityKEV 3 Mar
- CVE-2012-1856 — Microsoft Office MSCOMCTL.OCX Remote Code Execution VulnerabilityKEV 3 Mar
- CVE-2011-1889 — Microsoft Forefront TMG Remote Code Execution VulnerabilityKEV 3 Mar
- CVE-2010-3333 — Microsoft Office Stack-based Buffer Overflow VulnerabilityKEV 3 Mar
- CVE-2010-0232 — Microsoft Windows Kernel Exception Handler VulnerabilityKEV 3 Mar
- CVE-2009-3129 — Microsoft Excel Featheader Record Memory Corruption VulnerabilityKEV 3 Mar
- CVE-2009-1123 — Microsoft Windows Improper Input Validation VulnerabilityKEV 3 Mar
- CVE-2004-0210 — Microsoft Windows Privilege Escalation VulnerabilityKEV 3 Mar
- CVE-2002-0367 — Microsoft Windows Privilege Escalation VulnerabilityKEV 3 Mar
From the community1
Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.