Weekly briefing
Week 10 · 7 Mar – 13 Mar 2022 UTC · assess the changes, then plan the next dates.
Act on3
-
Mozilla Firefox · 2 security records
CVE-2022-26485
Coming up4
-
Microsoft Exchange Server Privilege Escalation Vulnerability
CVE-2018-8581
Same day: CISA KEV deadline: Microsoft Excel Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Installer Privilege Escalation Vulnerability
-
Microsoft Windows Privilege Escalation Vulnerability
CVE-2002-0367
Same day: CISA KEV deadline: Microsoft Windows Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Improper Input Validation Vulnerability; CISA KEV deadline: Microsoft Excel Featheader Record Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Windows Kernel Exception Handler Vulnerability; CISA KEV deadline: Microsoft Office Stack-based Buffer Overflow Vulnerability; CISA KEV deadline: Microsoft Forefront TMG Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Windows Kernel Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Office Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Win32k Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft ATM Font Driver Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft PowerPoint Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Office Malformed EPS File Vulnerability; CISA KEV deadline: Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Office Security Feature Bypass Vulnerability; CISA KEV deadline: Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Office Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Office Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability
-
Microsoft Win32k Memory Corruption Vulnerability
CVE-2015-2546
Same day: CISA KEV deadline: Microsoft Windows Kernel Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Transaction Manager Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Win32k Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Task Scheduler Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
-
Patch Tuesday, 12 April 2022
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
Changed1
-
March 2022 Security Updates
Microsoft Security Update Guide
How this list is chosen
Changes from 7 Mar 2022 – 13 Mar 2022 UTC and dates due up to 12 Apr 2022. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.
Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.
The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.