Weekly briefing

Coming up4

1. 24Mar

   CISA KEV deadlineDue 24 Mar 2022

   Microsoft Windows Privilege Escalation Vulnerability

   CVE-2002-0367

   Same day: CISA KEV deadline: Microsoft Windows Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Improper Input Validation Vulnerability; CISA KEV deadline: Microsoft Excel Featheader Record Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Windows Kernel Exception Handler Vulnerability; CISA KEV deadline: Microsoft Office Stack-based Buffer Overflow Vulnerability; CISA KEV deadline: Microsoft Forefront TMG Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Windows Kernel Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Office Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Win32k Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft ATM Font Driver Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft PowerPoint Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Office Malformed EPS File Vulnerability; CISA KEV deadline: Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Office Security Feature Bypass Vulnerability; CISA KEV deadline: Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Office Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Office Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

2. 5Apr

   CISA KEV deadlineDue 5 Apr 2022

   Microsoft Win32k Memory Corruption Vulnerability

   CVE-2015-2546

   Same day: CISA KEV deadline: Microsoft Windows Kernel Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Transaction Manager Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Win32k Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Task Scheduler Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

3. 12Apr

   Patch TuesdayScheduled for 12 Apr 2022

   Patch Tuesday, 12 April 2022

   The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

4. 15Apr

   CISA KEV deadlineDue 15 Apr 2022

   Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability

   CVE-2014-6324

   Same day: CISA KEV deadline: Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows SMB Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Scripting Engine Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Windows Shell Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft GDI Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Print Spooler Privilege Escalation Vulnerability