Weekly briefing
Week 15 · 11 Apr – 17 Apr 2022 UTC · assess the changes, then plan the next dates.
Act on3
-
Google Chromium V8 Type Confusion Vulnerability
CVE-2022-1364
-
Google Pixel Out-of-Bounds Write Vulnerability
CVE-2021-39793
Coming up4
-
Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability
CVE-2011-2005
Same day: CISA KEV deadline: Microsoft Word Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Win32k Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Office Uninitialized Memory Use Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Kernel Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows CSRSS Security Feature Bypass Vulnerability; CISA KEV deadline: Microsoft Edge Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Edge and Internet Explorer Type Confusion Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Information Disclosure Vulnerability; CISA KEV deadline: Microsoft Windows Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Event Tracing Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
-
Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability
CVE-2010-4398
Same day: CISA KEV deadline: Microsoft Windows User Profile Service Privilege Escalation Vulnerability
-
Microsoft SMBv1 Server Remote Code Execution Vulnerability
CVE-2017-0148
Same day: CISA KEV deadline: Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability
-
Patch Tuesday, 10 May 2022
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
Changed1
How this list is chosen
Changes from 11 Apr 2022 – 17 Apr 2022 UTC and dates due up to 17 May 2022. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.
Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.
The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.