WEEKLY BRIEFING · 25 APR – 1 MAY 2022 · UTC
Full source inventory · public sources only
Week 17 sources
No new MSRC release that week. CISA added 4 Microsoft CVEs to its Known Exploited Vulnerabilities catalog.
4Microsoft CVEs added to CISA KEV
Security to act on4
- CVE-2022-26904 — Microsoft Windows User Profile Service Privilege Escalation VulnerabilityKEV 25 Apr
- CVE-2022-21919 — Microsoft Windows User Profile Service Privilege Escalation VulnerabilityKEV 25 Apr
- CVE-2021-41357 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 25 Apr
- CVE-2021-40450 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 25 Apr
Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.