March 2022 Security Updates
MSRC release notes · Microsoft Security Update Guide
Assessment context
Monthly security release notes
Weekly briefing
Week 10 · 7 Mar – 13 Mar 2022 UTC · assess the changes, then plan the next dates.
All dated changes in this period
5 source records · 4 groupsSecurityAtlassian Jira and Confluence
Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
Atlassian · exploited, added to CISA KEV
CVE-2019-11581
Assessment context
CISA lists it as exploited
SecurityMozilla Firefox2 source records
Mozilla · exploited, added to CISA KEV · 2 entries
- Mozilla Firefox Use-After-Free Vulnerability
Mozilla · exploited, added to CISA KEV
CVE-2022-26485
Assessment context
CISA lists it as exploited
- Mozilla Firefox Use-After-Free Vulnerability
Mozilla · exploited, added to CISA KEV
CVE-2022-26486
Assessment context
CISA lists it as exploited
SecurityVMware vCenter Server
VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
VMware · exploited, added to CISA KEV
CVE-2021-21973
Assessment context
CISA lists it as exploited
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.