Vulnerability in OpenSSL library
Security advisory · Fortinet PSIRT advisories
Assessment context
The vendor rates it high
Weekly briefing
Week 13 · 28 Mar – 3 Apr 2022 UTC · assess the changes, then plan the next dates.
All dated changes in this period
31 source records · 18 groupsUpdates and guidanceDefender
Introducing differentiated protection for priority accounts in Microsoft Defender for Office 365: Introducing the general availability of differentiated protection for p…
Product news · Microsoft Defender for Office 365 what's new
Updates and guidanceDefender2 source records
Product news · 2 entries
- Introducing the URLClickEvents table in Microsoft Defender XDR Advanced Hunting: Introducing the UrlClickEvents table in advanced hunting with Microsoft Defender for Off…
Product news · Microsoft Defender for Office 365 what's new
- Manual email remediation enhancements: Bringing manual email purge actions taken in Microsoft Defender for Office 365 to the Microsoft Defender XDR (M365D) unified Actio…
Product news · Microsoft Defender for Office 365 what's new
SecurityWindows
Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2021-34484
Assessment context
CISA lists it as exploited
SecurityAtlassian Jira and Confluence
Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
Atlassian · exploited, added to CISA KEV
CVE-2021-26085
Assessment context
CISA lists it as exploited, including by ransomware
SecurityGoogle Chrome
Google Chromium V8 Type Confusion Vulnerability
Google · exploited, added to CISA KEV
CVE-2022-1096
Assessment context
CISA lists it as exploited
SecurityMozilla Firefox
Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
Mozilla · exploited, added to CISA KEV
CVE-2013-1690
Assessment context
CISA lists it as exploited
SecurityOracle Java2 source records
Oracle · exploited, added to CISA KEV · 2 entries
- Oracle Java SE Sandbox Bypass Vulnerability
Oracle · exploited, added to CISA KEV
CVE-2012-5076
Assessment context
CISA lists it as exploited
- Oracle Java SE Unspecified Vulnerability
Oracle · exploited, added to CISA KEV
CVE-2013-2465
Assessment context
CISA lists it as exploited, including by ransomware
SecurityMicrosoft 365 Apps3 source records
Added to CISA KEV · 3 entries
- Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2021-38646
Assessment context
CISA lists it as exploited
- Microsoft Office Uninitialized Memory Use Vulnerability
Added to CISA KEV
CVE-2015-1770
Assessment context
CISA lists it as exploited
- Microsoft Word Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2012-2539
Assessment context
CISA lists it as exploited
SecurityMicrosoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability
Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability
Added to CISA KEV
CVE-2011-2005
Assessment context
CISA lists it as exploited
SecurityMicrosoft DirectX Graphics Kernel Privilege Escalation Vulnerability2 source records
Added to CISA KEV · 2 entries
- Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2018-8405
Assessment context
CISA lists it as exploited
- Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2018-8406
Assessment context
CISA lists it as exploited
SecurityMicrosoft Edge3 source records
Added to CISA KEV · 3 entries
- Microsoft Edge Memory Corruption Vulnerability
Added to CISA KEV
CVE-2016-7200
Assessment context
CISA lists it as exploited
- Microsoft Edge Memory Corruption Vulnerability
Added to CISA KEV
CVE-2016-7201
Assessment context
CISA lists it as exploited
- Microsoft Edge and Internet Explorer Type Confusion Vulnerability
Added to CISA KEV
CVE-2017-0037
Assessment context
CISA lists it as exploited
SecurityMicrosoft Internet Explorer Information Disclosure Vulnerability
Microsoft Internet Explorer Information Disclosure Vulnerability
Added to CISA KEV
CVE-2017-0059
Assessment context
CISA lists it as exploited
SecurityMicrosoft Internet Explorer Memory Corruption Vulnerability2 source records
Added to CISA KEV · 2 entries
- Microsoft Internet Explorer Memory Corruption Vulnerability
Added to CISA KEV
CVE-2015-2419
Assessment context
CISA lists it as exploited
- Microsoft Internet Explorer Memory Corruption Vulnerability
Added to CISA KEV
CVE-2016-0189
Assessment context
CISA lists it as exploited
SecurityMicrosoft Internet Explorer Use-After-Free Vulnerability
Microsoft Internet Explorer Use-After-Free Vulnerability
Added to CISA KEV
CVE-2013-2551
Assessment context
CISA lists it as exploited
SecurityMicrosoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2013-3660
Assessment context
CISA lists it as exploited
SecurityMicrosoft Windows CSRSS Security Feature Bypass Vulnerability
Microsoft Windows CSRSS Security Feature Bypass Vulnerability
Added to CISA KEV
CVE-2016-0151
Assessment context
CISA lists it as exploited
SecurityWindows6 source records
Added to CISA KEV · 6 entries
- Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2015-2426
Assessment context
CISA lists it as exploited
- Microsoft Windows Event Tracing Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2021-34486
Assessment context
CISA lists it as exploited
- Microsoft Windows Kernel Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2016-0040
Assessment context
CISA lists it as exploited
Show the other 3 entries
- Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability
Added to CISA KEV
CVE-2010-4398
Assessment context
CISA lists it as exploited
- Microsoft Windows Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2017-0213
Assessment context
CISA lists it as exploited
- Microsoft Windows Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2018-8440
Assessment context
CISA lists it as exploited
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.