Weekly briefing

Week 11 · 14 Mar – 20 Mar 2022 UTC · assess the changes, then plan the next dates.

Dates in the next 30 days

65 source records · 27 groups

24 Mar 2022

SecurityMicrosoft 365 Apps10 source records

CISA KEV deadline · 10 entries

Microsoft Excel Featheader Record Memory Corruption Vulnerability
CISA KEV deadline
CVE-2009-3129
Assessment context
CISA deadline passed 1676 days ago
Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2012-1856
Assessment context
CISA deadline passed 1676 days ago
Microsoft Office Malformed EPS File Vulnerability
CISA KEV deadline
CVE-2015-2545
Assessment context
CISA deadline passed 1676 days ago

Show the other 7 entries

Microsoft Office Memory Corruption Vulnerability
CISA KEV deadline
CVE-2015-1642
Assessment context
CISA deadline passed 1676 days ago
Microsoft Office Memory Corruption Vulnerability
CISA KEV deadline
CVE-2016-7193
Assessment context
CISA deadline passed 1676 days ago
Microsoft Office Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2017-11826
Assessment context
CISA deadline passed 1676 days ago
Microsoft Office Security Feature Bypass Vulnerability
CISA KEV deadline
CVE-2016-7262
Assessment context
CISA deadline passed 1676 days ago
Microsoft Office Stack-based Buffer Overflow Vulnerability
CISA KEV deadline
CVE-2010-3333
Assessment context
CISA deadline passed 1676 days ago
Microsoft Office Use-After-Free Vulnerability
CISA KEV deadline
CVE-2017-0261
Assessment context
CISA deadline passed 1676 days ago
Microsoft PowerPoint Memory Corruption Vulnerability
CISA KEV deadline
CVE-2015-2424
Assessment context
CISA deadline passed 1676 days ago

24 Mar 2022

SecurityMicrosoft ATM Font Driver Privilege Escalation Vulnerability

Microsoft ATM Font Driver Privilege Escalation Vulnerability

CISA KEV deadline

CVE-2015-2387

Assessment context

CISA deadline passed 1676 days ago

24 Mar 2022

SecurityMicrosoft Forefront TMG Remote Code Execution Vulnerability

Microsoft Forefront TMG Remote Code Execution Vulnerability

CISA KEV deadline

CVE-2011-1889

Assessment context

CISA deadline passed 1676 days ago

24 Mar 2022

SecurityMicrosoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

CISA KEV deadline

CVE-2017-0001

Assessment context

CISA deadline passed 1676 days ago

24 Mar 2022

SecurityMicrosoft Internet Explorer Remote Code Execution Vulnerability

Microsoft Internet Explorer Remote Code Execution Vulnerability

CISA KEV deadline

CVE-2013-1347

Assessment context

CISA deadline passed 1676 days ago

24 Mar 2022

SecurityMicrosoft Internet Explorer Use-After-Free Vulnerability

Microsoft Internet Explorer Use-After-Free Vulnerability

CISA KEV deadline

CVE-2013-3897

Assessment context

CISA deadline passed 1676 days ago

24 Mar 2022

SecurityMicrosoft Malware Protection Engine Improper Restriction of Operations Vulnerability

Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability

CISA KEV deadline

CVE-2017-8540

Assessment context

CISA deadline passed 1676 days ago

24 Mar 2022

SecurityMicrosoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k Privilege Escalation Vulnerability

CISA KEV deadline

CVE-2015-1701

Assessment context

CISA deadline passed 1676 days ago

24 Mar 2022

SecurityWindows7 source records

CISA KEV deadline · 7 entries

Microsoft Windows Improper Input Validation Vulnerability
CISA KEV deadline
CVE-2009-1123
Assessment context
CISA deadline passed 1676 days ago
Microsoft Windows Kernel Exception Handler Vulnerability
CISA KEV deadline
CVE-2010-0232
Assessment context
CISA deadline passed 1676 days ago
Microsoft Windows Kernel Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2013-5065
Assessment context
CISA deadline passed 1676 days ago

Show the other 4 entries

Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2014-4114
Assessment context
CISA deadline passed 1676 days ago
Microsoft Windows Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2002-0367
Assessment context
CISA deadline passed 1676 days ago
Microsoft Windows Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2004-0210
Assessment context
CISA deadline passed 1676 days ago
Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2016-0099
Assessment context
CISA deadline passed 1676 days ago

5 Apr 2022

SecurityMicrosoft Task Scheduler Privilege Escalation Vulnerability

Microsoft Task Scheduler Privilege Escalation Vulnerability

CISA KEV deadline

CVE-2019-1069

Assessment context

CISA deadline passed 1664 days ago

5 Apr 2022

SecurityMicrosoft Win32k Memory Corruption Vulnerability

Microsoft Win32k Memory Corruption Vulnerability

CISA KEV deadline

CVE-2015-2546

Assessment context

CISA deadline passed 1664 days ago

5 Apr 2022

SecurityMicrosoft Win32k Privilege Escalation Vulnerability2 source records

CISA KEV deadline · 2 entries

Microsoft Win32k Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2018-8120
Assessment context
CISA deadline passed 1664 days ago
Microsoft Win32k Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2019-1132
Assessment context
CISA deadline passed 1664 days ago

5 Apr 2022

SecurityWindows10 source records

CISA KEV deadline · 10 entries

Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2019-1253
Assessment context
CISA deadline passed 1664 days ago
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2019-0841
Assessment context
CISA deadline passed 1664 days ago
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2019-1064
Assessment context
CISA deadline passed 1664 days ago

Show the other 7 entries

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2019-1129
Assessment context
CISA deadline passed 1664 days ago
Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2019-1315
Assessment context
CISA deadline passed 1664 days ago
Microsoft Windows Kernel Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2016-3309
Assessment context
CISA deadline passed 1664 days ago
Microsoft Windows Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2019-0543
Assessment context
CISA deadline passed 1664 days ago
Microsoft Windows Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2019-1322
Assessment context
CISA deadline passed 1664 days ago
Microsoft Windows Transaction Manager Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2017-0101
Assessment context
CISA deadline passed 1664 days ago
Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2019-1405
Assessment context
CISA deadline passed 1664 days ago

15 Apr 2022

SecurityMicrosoft GDI Remote Code Execution Vulnerability

Microsoft GDI Remote Code Execution Vulnerability

CISA KEV deadline

CVE-2019-0903

Assessment context

CISA deadline passed 1654 days ago

15 Apr 2022

SecurityMicrosoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability

Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability

CISA KEV deadline

CVE-2014-6324

Assessment context

CISA deadline passed 1654 days ago

15 Apr 2022

SecurityMicrosoft Scripting Engine Memory Corruption Vulnerability

Microsoft Scripting Engine Memory Corruption Vulnerability

CISA KEV deadline

CVE-2018-8373

Assessment context

CISA deadline passed 1654 days ago

15 Apr 2022

SecurityWindows4 source records

CISA KEV deadline · 4 entries

Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2014-6332
Assessment context
CISA deadline passed 1654 days ago
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2022-21999
Assessment context
CISA deadline passed 1654 days ago
Microsoft Windows SMB Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2017-0146
Assessment context
CISA deadline passed 1654 days ago

Show the other 1 entries

Microsoft Windows Shell Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2018-8414
Assessment context
CISA deadline passed 1654 days ago

18 Apr 2022

SecurityMicrosoft 365 Apps3 source records

CISA KEV deadline · 3 entries

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-38646
Assessment context
CISA deadline passed 1651 days ago
Microsoft Office Uninitialized Memory Use Vulnerability
CISA KEV deadline
CVE-2015-1770
Assessment context
CISA deadline passed 1651 days ago
Microsoft Word Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2012-2539
Assessment context
CISA deadline passed 1651 days ago

18 Apr 2022

SecurityMicrosoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability

Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability

CISA KEV deadline

CVE-2011-2005

Assessment context

CISA deadline passed 1651 days ago

18 Apr 2022

SecurityMicrosoft DirectX Graphics Kernel Privilege Escalation Vulnerability2 source records

CISA KEV deadline · 2 entries

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2018-8405
Assessment context
CISA deadline passed 1651 days ago
Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2018-8406
Assessment context
CISA deadline passed 1651 days ago

18 Apr 2022

SecurityMicrosoft Edge3 source records

CISA KEV deadline · 3 entries

Microsoft Edge Memory Corruption Vulnerability
CISA KEV deadline
CVE-2016-7200
Assessment context
CISA deadline passed 1651 days ago
Microsoft Edge Memory Corruption Vulnerability
CISA KEV deadline
CVE-2016-7201
Assessment context
CISA deadline passed 1651 days ago
Microsoft Edge and Internet Explorer Type Confusion Vulnerability
CISA KEV deadline
CVE-2017-0037
Assessment context
CISA deadline passed 1651 days ago

18 Apr 2022

SecurityMicrosoft Internet Explorer Information Disclosure Vulnerability

Microsoft Internet Explorer Information Disclosure Vulnerability

CISA KEV deadline

CVE-2017-0059

Assessment context

CISA deadline passed 1651 days ago

18 Apr 2022

SecurityMicrosoft Internet Explorer Memory Corruption Vulnerability2 source records

CISA KEV deadline · 2 entries

Microsoft Internet Explorer Memory Corruption Vulnerability
CISA KEV deadline
CVE-2015-2419
Assessment context
CISA deadline passed 1651 days ago
Microsoft Internet Explorer Memory Corruption Vulnerability
CISA KEV deadline
CVE-2016-0189
Assessment context
CISA deadline passed 1651 days ago

18 Apr 2022

SecurityMicrosoft Internet Explorer Use-After-Free Vulnerability

Microsoft Internet Explorer Use-After-Free Vulnerability

CISA KEV deadline

CVE-2013-2551

Assessment context

CISA deadline passed 1651 days ago

Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.