Weekly briefing

Week 15 · 11 Apr – 17 Apr 2022 UTC · assess the changes, then plan the next dates.

Dates in the next 30 days

85 source records · 33 groups

18 Apr 2022

SecurityMicrosoft 365 Apps3 source records

CISA KEV deadline · 3 entries

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-38646
Assessment context
CISA deadline passed 1651 days ago
Microsoft Office Uninitialized Memory Use Vulnerability
CISA KEV deadline
CVE-2015-1770
Assessment context
CISA deadline passed 1651 days ago
Microsoft Word Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2012-2539
Assessment context
CISA deadline passed 1651 days ago

18 Apr 2022

SecurityMicrosoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability

Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability

CISA KEV deadline

CVE-2011-2005

Assessment context

CISA deadline passed 1651 days ago

18 Apr 2022

SecurityMicrosoft DirectX Graphics Kernel Privilege Escalation Vulnerability2 source records

CISA KEV deadline · 2 entries

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2018-8405
Assessment context
CISA deadline passed 1651 days ago
Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2018-8406
Assessment context
CISA deadline passed 1651 days ago

18 Apr 2022

SecurityMicrosoft Edge3 source records

CISA KEV deadline · 3 entries

Microsoft Edge Memory Corruption Vulnerability
CISA KEV deadline
CVE-2016-7200
Assessment context
CISA deadline passed 1651 days ago
Microsoft Edge Memory Corruption Vulnerability
CISA KEV deadline
CVE-2016-7201
Assessment context
CISA deadline passed 1651 days ago
Microsoft Edge and Internet Explorer Type Confusion Vulnerability
CISA KEV deadline
CVE-2017-0037
Assessment context
CISA deadline passed 1651 days ago

18 Apr 2022

SecurityMicrosoft Internet Explorer Information Disclosure Vulnerability

Microsoft Internet Explorer Information Disclosure Vulnerability

CISA KEV deadline

CVE-2017-0059

Assessment context

CISA deadline passed 1651 days ago

18 Apr 2022

SecurityMicrosoft Internet Explorer Memory Corruption Vulnerability2 source records

CISA KEV deadline · 2 entries

Microsoft Internet Explorer Memory Corruption Vulnerability
CISA KEV deadline
CVE-2015-2419
Assessment context
CISA deadline passed 1651 days ago
Microsoft Internet Explorer Memory Corruption Vulnerability
CISA KEV deadline
CVE-2016-0189
Assessment context
CISA deadline passed 1651 days ago

18 Apr 2022

SecurityMicrosoft Internet Explorer Use-After-Free Vulnerability

Microsoft Internet Explorer Use-After-Free Vulnerability

CISA KEV deadline

CVE-2013-2551

Assessment context

CISA deadline passed 1651 days ago

18 Apr 2022

SecurityMicrosoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k Privilege Escalation Vulnerability

CISA KEV deadline

CVE-2013-3660

Assessment context

CISA deadline passed 1651 days ago

18 Apr 2022

SecurityMicrosoft Windows CSRSS Security Feature Bypass Vulnerability

Microsoft Windows CSRSS Security Feature Bypass Vulnerability

CISA KEV deadline

CVE-2016-0151

Assessment context

CISA deadline passed 1651 days ago

18 Apr 2022

SecurityWindows5 source records

CISA KEV deadline · 5 entries

Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2015-2426
Assessment context
CISA deadline passed 1651 days ago
Microsoft Windows Event Tracing Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-34486
Assessment context
CISA deadline passed 1651 days ago
Microsoft Windows Kernel Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2016-0040
Assessment context
CISA deadline passed 1651 days ago

Show the other 2 entries

Microsoft Windows Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2017-0213
Assessment context
CISA deadline passed 1651 days ago
Microsoft Windows Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2018-8440
Assessment context
CISA deadline passed 1651 days ago

21 Apr 2022

SecurityWindows2 source records

CISA KEV deadline · 2 entries

Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability
CISA KEV deadline
CVE-2010-4398
Assessment context
CISA deadline passed 1648 days ago
Microsoft Windows User Profile Service Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-34484
Assessment context
CISA deadline passed 1648 days ago

27 Apr 2022

SecurityMicrosoft HTTP Protocol Stack Remote Code Execution Vulnerability

Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability

CISA KEV deadline

CVE-2021-31166

Assessment context

CISA deadline passed 1642 days ago

27 Apr 2022

SecurityMicrosoft SMBv1 Server Remote Code Execution Vulnerability

Microsoft SMBv1 Server Remote Code Execution Vulnerability

CISA KEV deadline

CVE-2017-0148

Assessment context

CISA deadline passed 1642 days ago

2 May 2022

SecurityActive Directory2 source records

CISA KEV deadline · 2 entries

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-42278
Assessment context
CISA deadline passed 1637 days ago
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-42287
Assessment context
CISA deadline passed 1637 days ago

3 May 2022

Security.NET3 source records

CISA KEV deadline · 3 entries

Microsoft .NET Framework Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2017-8759
Assessment context
CISA deadline passed 1636 days ago
Microsoft .NET Framework Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2020-0646
Assessment context
CISA deadline passed 1636 days ago
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2020-1147
Assessment context
CISA deadline passed 1636 days ago

3 May 2022

SecurityExchange6 source records

CISA KEV deadline · 6 entries

Microsoft Exchange Server Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2020-17144
Assessment context
CISA deadline passed 1636 days ago
Microsoft Exchange Server Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-26855
Assessment context
CISA deadline passed 1636 days ago
Microsoft Exchange Server Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-26857
Assessment context
CISA deadline passed 1636 days ago

Show the other 3 entries

Microsoft Exchange Server Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-26858
Assessment context
CISA deadline passed 1636 days ago
Microsoft Exchange Server Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-27065
Assessment context
CISA deadline passed 1636 days ago
Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2020-0688
Assessment context
CISA deadline passed 1636 days ago

3 May 2022

SecurityHyper-V

Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

CISA KEV deadline

CVE-2020-1040

Assessment context

CISA deadline passed 1636 days ago

3 May 2022

SecurityMicrosoft 365 Apps7 source records

CISA KEV deadline · 7 entries

Microsoft Office Memory Corruption Vulnerability
CISA KEV deadline
CVE-2015-1641
Assessment context
CISA deadline passed 1636 days ago
Microsoft Office Memory Corruption Vulnerability
CISA KEV deadline
CVE-2017-11882
Assessment context
CISA deadline passed 1636 days ago
Microsoft Office Memory Corruption Vulnerability
CISA KEV deadline
CVE-2018-0798
Assessment context
CISA deadline passed 1636 days ago

Show the other 4 entries

Microsoft Office Memory Corruption Vulnerability
CISA KEV deadline
CVE-2018-0802
Assessment context
CISA deadline passed 1636 days ago
Microsoft Office OLE DLL Side Loading Vulnerability
CISA KEV deadline
CVE-2016-3235
Assessment context
CISA deadline passed 1636 days ago
Microsoft Office Outlook Security Feature Bypass Vulnerability
CISA KEV deadline
CVE-2017-11774
Assessment context
CISA deadline passed 1636 days ago
Microsoft Office and WordPad Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2017-0199
Assessment context
CISA deadline passed 1636 days ago

3 May 2022

SecurityMicrosoft Edge

Microsoft Edge and Internet Explorer Memory Corruption Vulnerability

CISA KEV deadline

CVE-2020-0878

Assessment context

CISA deadline passed 1636 days ago

3 May 2022

SecurityMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability6 source records

CISA KEV deadline · 6 entries

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CISA KEV deadline
CVE-2018-8653
Assessment context
CISA deadline passed 1636 days ago
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CISA KEV deadline
CVE-2019-1367
Assessment context
CISA deadline passed 1636 days ago
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CISA KEV deadline
CVE-2019-1429
Assessment context
CISA deadline passed 1636 days ago

Show the other 3 entries

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CISA KEV deadline
CVE-2020-0674
Assessment context
CISA deadline passed 1636 days ago
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CISA KEV deadline
CVE-2020-0968
Assessment context
CISA deadline passed 1636 days ago
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CISA KEV deadline
CVE-2020-1380
Assessment context
CISA deadline passed 1636 days ago

3 May 2022

SecurityMicrosoft MSCOMCTL.OCX Remote Code Execution Vulnerability

Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability

CISA KEV deadline

CVE-2012-0158

Assessment context

CISA deadline passed 1636 days ago

3 May 2022

SecurityMicrosoft MSHTML Remote Code Execution Vulnerability

Microsoft MSHTML Remote Code Execution Vulnerability

CISA KEV deadline

CVE-2019-0541

Assessment context

CISA deadline passed 1636 days ago

3 May 2022

SecurityMicrosoft Netlogon Privilege Escalation Vulnerability

Microsoft Netlogon Privilege Escalation Vulnerability

CISA KEV deadline

CVE-2020-1472

Assessment context

CISA deadline passed 1636 days ago

3 May 2022

SecurityMicrosoft Remote Desktop Services Remote Code Execution Vulnerability

Microsoft Remote Desktop Services Remote Code Execution Vulnerability

CISA KEV deadline

CVE-2019-0708

Assessment context

CISA deadline passed 1636 days ago

Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.