Weekly briefing
Week 17 · 25 Apr – 1 May 2022 UTC · assess the changes, then plan the next dates.
Coming up4
-
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
CVE-2021-42278
Same day: CISA KEV deadline: Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
-
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
CVE-2012-0158
Same day: CISA KEV deadline: Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Office Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Win32k Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Media Center Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Office OLE DLL Side Loading Vulnerability; CISA KEV deadline: Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Office and WordPad Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Office Outlook Security Feature Bypass Vulnerability; CISA KEV deadline: Microsoft Windows Server Buffer Overflow Vulnerability; CISA KEV deadline: Microsoft .NET Framework Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability; CISA KEV deadline: Microsoft MSHTML Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft SharePoint Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Remote Desktop Services Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows CryptoAPI Spoofing Vulnerability; CISA KEV deadline: Microsoft Windows Installer Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Edge and Internet Explorer Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Kernel Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows DNS Server Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Spoofing Vulnerability; CISA KEV deadline: Microsoft Netlogon Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Exchange Server Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Print Spooler Remote Code Execution Vulnerability
-
Microsoft Internet Explorer Memory Corruption Vulnerability
CVE-2015-2502
Same day: CISA KEV deadline: Microsoft Windows CLFS Driver Privilege Escalation Vulnerability
-
Patch Tuesday, 10 May 2022
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
Changed2
-
Windows · 2 security records
CVE-2022-21919
How this list is chosen
Changes from 25 Apr 2022 – 1 May 2022 UTC and dates due up to 31 May 2022. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.
Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.
The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.