WEEKLY BRIEFING · 28 MAR – 3 APR 2022 · UTC
Full source inventory · public sources only
Week 13 sources
No new MSRC release that week. CISA added 22 Microsoft CVEs to its Known Exploited Vulnerabilities catalog. 1 Windows and security article from Microsoft blogs.
1Windows and security article
22Microsoft CVEs added to CISA KEV
Security to act on22
- CVE-2021-34484 — Microsoft Windows User Profile Service Privilege Escalation VulnerabilityKEV 31 Mar
- CVE-2021-38646 — Microsoft Office Access Connectivity Engine Remote Code Execution VulnerabilityKEV 28 Mar
- CVE-2021-34486 — Microsoft Windows Event Tracing Privilege Escalation VulnerabilityKEV 28 Mar
- CVE-2018-8440 — Microsoft Windows Privilege Escalation VulnerabilityKEV 28 Mar
- CVE-2018-8406 — Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityKEV 28 Mar
- CVE-2018-8405 — Microsoft DirectX Graphics Kernel Privilege Escalation VulnerabilityKEV 28 Mar
- CVE-2017-0213 — Microsoft Windows Privilege Escalation VulnerabilityKEV 28 Mar
- CVE-2017-0059 — Microsoft Internet Explorer Information Disclosure VulnerabilityKEV 28 Mar
- CVE-2017-0037 — Microsoft Edge and Internet Explorer Type Confusion VulnerabilityKEV 28 Mar
- CVE-2016-7201 — Microsoft Edge Memory Corruption VulnerabilityKEV 28 Mar
- CVE-2016-7200 — Microsoft Edge Memory Corruption VulnerabilityKEV 28 Mar
- CVE-2016-0189 — Microsoft Internet Explorer Memory Corruption VulnerabilityKEV 28 Mar
- CVE-2016-0151 — Microsoft Windows CSRSS Security Feature Bypass VulnerabilityKEV 28 Mar
- CVE-2016-0040 — Microsoft Windows Kernel Privilege Escalation VulnerabilityKEV 28 Mar
- CVE-2015-2426 — Microsoft Windows Adobe Type Manager Library Remote Code Execution VulnerabilityKEV 28 Mar
- CVE-2015-2419 — Microsoft Internet Explorer Memory Corruption VulnerabilityKEV 28 Mar
- CVE-2015-1770 — Microsoft Office Uninitialized Memory Use VulnerabilityKEV 28 Mar
- CVE-2013-3660 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 28 Mar
- CVE-2013-2551 — Microsoft Internet Explorer Use-After-Free VulnerabilityKEV 28 Mar
- CVE-2012-2539 — Microsoft Word Remote Code Execution VulnerabilityKEV 28 Mar
- CVE-2011-2005 — Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation VulnerabilityKEV 28 Mar
- CVE-2010-4398 — Microsoft Windows Kernel Stack-Based Buffer Overflow VulnerabilityKEV 28 Mar
Windows and security news1
Product news3
Defender · 3
- Introducing differentiated protection for priority accounts in Microsoft Defender for Office 365: Introducing the general availability of differentiated protection for p…1 Apr
- Introducing the URLClickEvents table in Microsoft Defender XDR Advanced Hunting: Introducing the UrlClickEvents table in advanced hunting with Microsoft Defender for Off…1 Apr
- Manual email remediation enhancements: Bringing manual email purge actions taken in Microsoft Defender for Office 365 to the Microsoft Defender XDR (M365D) unified Actio…1 Apr
Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.