WEEKLY BRIEFING · 14 MAR – 20 MAR 2022 · UTC
Full source inventory · public sources only
Week 11 sources
No new MSRC release that week. CISA added 14 Microsoft CVEs to its Known Exploited Vulnerabilities catalog.
14Microsoft CVEs added to CISA KEV
Security to act on14
- CVE-2019-1405 — Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation VulnerabilityKEV 15 Mar
- CVE-2019-1322 — Microsoft Windows Privilege Escalation VulnerabilityKEV 15 Mar
- CVE-2019-1315 — Microsoft Windows Error Reporting Manager Privilege Escalation VulnerabilityKEV 15 Mar
- CVE-2019-1253 — Microsoft Windows AppX Deployment Server Privilege Escalation VulnerabilityKEV 15 Mar
- CVE-2019-1132 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 15 Mar
- CVE-2019-1129 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityKEV 15 Mar
- CVE-2019-1069 — Microsoft Task Scheduler Privilege Escalation VulnerabilityKEV 15 Mar
- CVE-2019-1064 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityKEV 15 Mar
- CVE-2019-0841 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation VulnerabilityKEV 15 Mar
- CVE-2019-0543 — Microsoft Windows Privilege Escalation VulnerabilityKEV 15 Mar
- CVE-2018-8120 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 15 Mar
- CVE-2017-0101 — Microsoft Windows Transaction Manager Privilege Escalation VulnerabilityKEV 15 Mar
- CVE-2016-3309 — Microsoft Windows Kernel Privilege Escalation VulnerabilityKEV 15 Mar
- CVE-2015-2546 — Microsoft Win32k Memory Corruption VulnerabilityKEV 15 Mar
Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.