VMSA-2022-0009:VMware vCenter Server updates address an information disclosure vulnerability
Security advisory · VMware security advisories (Broadcom)
Weekly briefing
Week 12 · 21 Mar – 27 Mar 2022 UTC · assess the changes, then plan the next dates.
All dated changes in this period
39 source records · 16 groupsSecurityCisco6 source records
Cisco · exploited, added to CISA KEV · 6 entries
- Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2009-2055
Assessment context
CISA lists it as exploited
- Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2010-3035
Assessment context
CISA lists it as exploited
- Cisco IOS and IOS XE Remote Code Execution Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2017-3881
Assessment context
CISA lists it as exploited
Show the other 3 entries
- Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2015-0666
Assessment context
CISA lists it as exploited
- Cisco Secure Access Control System Java Deserialization Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0147
Assessment context
CISA lists it as exploited
- Cisco VPN Routers Remote Code Execution Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2018-0125
Assessment context
CISA lists it as exploited
SecurityPalo Alto Networks
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
Palo Alto Networks · exploited, added to CISA KEV
CVE-2020-2021
Assessment context
CISA lists it as exploited, including by ransomware
SecurityMicrosoft GDI Remote Code Execution Vulnerability
Microsoft GDI Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2019-0903
Assessment context
CISA lists it as exploited
SecurityMicrosoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2014-6324
Assessment context
CISA lists it as exploited
SecurityMicrosoft Scripting Engine Memory Corruption Vulnerability
Microsoft Scripting Engine Memory Corruption Vulnerability
Added to CISA KEV
CVE-2018-8373
Assessment context
CISA lists it as exploited
SecurityWindows4 source records
Added to CISA KEV · 4 entries
- Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2014-6332
Assessment context
CISA lists it as exploited
- Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2022-21999
Assessment context
CISA lists it as exploited
- Microsoft Windows SMB Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2017-0146
Assessment context
CISA lists it as exploited
Show the other 1 entries
- Microsoft Windows Shell Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2018-8414
Assessment context
CISA lists it as exploited
SecurityMicrosoft 365 Apps10 source records
CISA KEV deadline · 10 entries
- Microsoft Excel Featheader Record Memory Corruption Vulnerability
CISA KEV deadline
CVE-2009-3129
Assessment context
CISA deadline passed 1676 days ago
- Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2012-1856
Assessment context
CISA deadline passed 1676 days ago
- Microsoft Office Malformed EPS File Vulnerability
CISA KEV deadline
CVE-2015-2545
Assessment context
CISA deadline passed 1676 days ago
Show the other 7 entries
- Microsoft Office Memory Corruption Vulnerability
CISA KEV deadline
CVE-2015-1642
Assessment context
CISA deadline passed 1676 days ago
- Microsoft Office Memory Corruption Vulnerability
CISA KEV deadline
CVE-2016-7193
Assessment context
CISA deadline passed 1676 days ago
- Microsoft Office Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2017-11826
Assessment context
CISA deadline passed 1676 days ago
- Microsoft Office Security Feature Bypass Vulnerability
CISA KEV deadline
CVE-2016-7262
Assessment context
CISA deadline passed 1676 days ago
- Microsoft Office Stack-based Buffer Overflow Vulnerability
CISA KEV deadline
CVE-2010-3333
Assessment context
CISA deadline passed 1676 days ago
- Microsoft Office Use-After-Free Vulnerability
CISA KEV deadline
CVE-2017-0261
Assessment context
CISA deadline passed 1676 days ago
- Microsoft PowerPoint Memory Corruption Vulnerability
CISA KEV deadline
CVE-2015-2424
Assessment context
CISA deadline passed 1676 days ago
SecurityMicrosoft ATM Font Driver Privilege Escalation Vulnerability
Microsoft ATM Font Driver Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2015-2387
Assessment context
CISA deadline passed 1676 days ago
SecurityMicrosoft Forefront TMG Remote Code Execution Vulnerability
Microsoft Forefront TMG Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2011-1889
Assessment context
CISA deadline passed 1676 days ago
SecurityMicrosoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability
Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2017-0001
Assessment context
CISA deadline passed 1676 days ago
SecurityMicrosoft Internet Explorer Remote Code Execution Vulnerability
Microsoft Internet Explorer Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2013-1347
Assessment context
CISA deadline passed 1676 days ago
SecurityMicrosoft Internet Explorer Use-After-Free Vulnerability
Microsoft Internet Explorer Use-After-Free Vulnerability
CISA KEV deadline
CVE-2013-3897
Assessment context
CISA deadline passed 1676 days ago
SecurityMicrosoft Malware Protection Engine Improper Restriction of Operations Vulnerability
Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability
CISA KEV deadline
CVE-2017-8540
Assessment context
CISA deadline passed 1676 days ago
SecurityMicrosoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2015-1701
Assessment context
CISA deadline passed 1676 days ago
SecurityWindows7 source records
CISA KEV deadline · 7 entries
- Microsoft Windows Improper Input Validation Vulnerability
CISA KEV deadline
CVE-2009-1123
Assessment context
CISA deadline passed 1676 days ago
- Microsoft Windows Kernel Exception Handler Vulnerability
CISA KEV deadline
CVE-2010-0232
Assessment context
CISA deadline passed 1676 days ago
- Microsoft Windows Kernel Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2013-5065
Assessment context
CISA deadline passed 1676 days ago
Show the other 4 entries
- Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2014-4114
Assessment context
CISA deadline passed 1676 days ago
- Microsoft Windows Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2002-0367
Assessment context
CISA deadline passed 1676 days ago
- Microsoft Windows Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2004-0210
Assessment context
CISA deadline passed 1676 days ago
- Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2016-0099
Assessment context
CISA deadline passed 1676 days ago
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.