WEEKLY BRIEFING · 21 MAR – 27 MAR 2022 · UTC
Full source inventory · public sources only
Week 12 sources
No new MSRC release that week. CISA added 7 Microsoft CVEs to its Known Exploited Vulnerabilities catalog. 1 Windows and security article from Microsoft blogs.
1Windows and security article
7Microsoft CVEs added to CISA KEV
Security to act on7
- CVE-2022-21999 — Microsoft Windows Print Spooler Privilege Escalation VulnerabilityKEV 25 Mar
- CVE-2019-0903 — Microsoft GDI Remote Code Execution VulnerabilityKEV 25 Mar
- CVE-2018-8414 — Microsoft Windows Shell Remote Code Execution VulnerabilityKEV 25 Mar
- CVE-2018-8373 — Microsoft Scripting Engine Memory Corruption VulnerabilityKEV 25 Mar
- CVE-2017-0146 — Microsoft Windows SMB Remote Code Execution VulnerabilityKEV 25 Mar
- CVE-2014-6332 — Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution VulnerabilityKEV 25 Mar
- CVE-2014-6324 — Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation VulnerabilityKEV 25 Mar
Windows and security news1
Product news2
Global Secure Access · 1
Microsoft Entra · 1
Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.