Weekly briefing
Week 16 · 18 Apr – 24 Apr 2022 UTC · assess the changes, then plan the next dates.
Coming up4
-
Microsoft SMBv1 Server Remote Code Execution Vulnerability
CVE-2017-0148
Same day: CISA KEV deadline: Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability
-
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
CVE-2021-42278
Same day: CISA KEV deadline: Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
-
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
CVE-2012-0158
Same day: CISA KEV deadline: Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Office Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Win32k Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Media Center Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Office OLE DLL Side Loading Vulnerability; CISA KEV deadline: Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Office and WordPad Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Office Outlook Security Feature Bypass Vulnerability; CISA KEV deadline: Microsoft Windows Server Buffer Overflow Vulnerability; CISA KEV deadline: Microsoft .NET Framework Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability; CISA KEV deadline: Microsoft MSHTML Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft SharePoint Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Remote Desktop Services Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows CryptoAPI Spoofing Vulnerability; CISA KEV deadline: Microsoft Windows Installer Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Edge and Internet Explorer Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Kernel Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows DNS Server Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Spoofing Vulnerability; CISA KEV deadline: Microsoft Netlogon Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Exchange Server Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Print Spooler Remote Code Execution Vulnerability
-
Patch Tuesday, 10 May 2022
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
Changed1
How this list is chosen
Changes from 18 Apr 2022 – 24 Apr 2022 UTC and dates due up to 24 May 2022. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.
Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.
The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.