Weekly briefing
Week 14 · 4 Apr – 10 Apr 2022 UTC · assess the changes, then plan the next dates.
Act on1
-
macOS · 2 security records
CVE-2022-22674
Coming up4
-
Patch Tuesday, 12 April 2022
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
-
Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
CVE-2014-6324
Same day: CISA KEV deadline: Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows SMB Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Scripting Engine Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Windows Shell Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft GDI Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Print Spooler Privilege Escalation Vulnerability
-
Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability
CVE-2011-2005
Same day: CISA KEV deadline: Microsoft Word Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Win32k Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Office Uninitialized Memory Use Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Kernel Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows CSRSS Security Feature Bypass Vulnerability; CISA KEV deadline: Microsoft Edge Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Edge and Internet Explorer Type Confusion Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Information Disclosure Vulnerability; CISA KEV deadline: Microsoft Windows Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Event Tracing Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
-
Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability
CVE-2010-4398
Same day: CISA KEV deadline: Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Changed2
How this list is chosen
Changes from 4 Apr 2022 – 10 Apr 2022 UTC and dates due up to 10 May 2022. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.
Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.
The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.