WEEKLY BRIEFING · 11 APR – 17 APR 2022 · UTC
Full source inventory · public sources only
Week 15 sources
MSRC published April 2022 Security Updates. CISA added 4 Microsoft CVEs to its Known Exploited Vulnerabilities catalog.
1MSRC release note
4Microsoft CVEs added to CISA KEV
Security to act on4
- CVE-2022-24521 — Microsoft Windows CLFS Driver Privilege Escalation VulnerabilityKEV 13 Apr
- CVE-2015-2502 — Microsoft Internet Explorer Memory Corruption VulnerabilityKEV 13 Apr
- CVE-2021-42287 — Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityKEV 11 Apr
- CVE-2021-42278 — Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityKEV 11 Apr
MSRC security releases1
Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.