Weekly briefing

Week 18 · 2 May – 8 May 2022 UTC · assess the changes, then plan the next dates.

All dated changes in this period

62 source records · 22 groups

4 May 2022

SecurityiOS and iPadOS / macOS2 source records

Apple · exploited, added to CISA KEV · 2 entries

Apple Multiple Products Type Confusion Vulnerability
Apple · exploited, added to CISA KEV
CVE-2019-8506
Assessment context
CISA lists it as exploited
Apple Multiple Products Type Confusion Vulnerability
Apple · exploited, added to CISA KEV
CVE-2021-1789
Assessment context
CISA lists it as exploited

4 May 2022

SecurityMicrosoft Internet Explorer Use-After-Free Vulnerability

Microsoft Internet Explorer Use-After-Free Vulnerability

Added to CISA KEV

CVE-2014-0322

Assessment context

CISA lists it as exploited

4 May 2022

SecurityMicrosoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k Privilege Escalation Vulnerability

Added to CISA KEV

CVE-2014-4113

Assessment context

CISA lists it as exploited

4 May 2022

CommunityNathan McNulty

Defender for Endpoint - Removable Storage Access Control

Community post · Nathan McNulty

4 May 2022

SecurityMicrosoft Internet Explorer Memory Corruption Vulnerability

Microsoft Internet Explorer Memory Corruption Vulnerability

CISA KEV deadline

CVE-2015-2502

Assessment context

CISA deadline passed 1635 days ago

4 May 2022

SecurityWindows

Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

CISA KEV deadline

CVE-2022-24521

Assessment context

CISA deadline passed 1635 days ago

3 May 2022

ReleasesPSReadLine

PSReadLine 2.2.5

Tool release · PSReadLine releases

Assessment context

3 May 2022

Security.NET3 source records

CISA KEV deadline · 3 entries

Microsoft .NET Framework Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2017-8759
Assessment context
CISA deadline passed 1636 days ago
Microsoft .NET Framework Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2020-0646
Assessment context
CISA deadline passed 1636 days ago
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2020-1147
Assessment context
CISA deadline passed 1636 days ago

3 May 2022

SecurityExchange6 source records

CISA KEV deadline · 6 entries

Microsoft Exchange Server Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2020-17144
Assessment context
CISA deadline passed 1636 days ago
Microsoft Exchange Server Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-26855
Assessment context
CISA deadline passed 1636 days ago
Microsoft Exchange Server Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-26857
Assessment context
CISA deadline passed 1636 days ago

Show the other 3 entries

Microsoft Exchange Server Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-26858
Assessment context
CISA deadline passed 1636 days ago
Microsoft Exchange Server Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-27065
Assessment context
CISA deadline passed 1636 days ago
Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2020-0688
Assessment context
CISA deadline passed 1636 days ago

3 May 2022

SecurityHyper-V

Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability

CISA KEV deadline

CVE-2020-1040

Assessment context

CISA deadline passed 1636 days ago

3 May 2022

SecurityMicrosoft 365 Apps7 source records

CISA KEV deadline · 7 entries

Microsoft Office Memory Corruption Vulnerability
CISA KEV deadline
CVE-2015-1641
Assessment context
CISA deadline passed 1636 days ago
Microsoft Office Memory Corruption Vulnerability
CISA KEV deadline
CVE-2017-11882
Assessment context
CISA deadline passed 1636 days ago
Microsoft Office Memory Corruption Vulnerability
CISA KEV deadline
CVE-2018-0798
Assessment context
CISA deadline passed 1636 days ago

Show the other 4 entries

Microsoft Office Memory Corruption Vulnerability
CISA KEV deadline
CVE-2018-0802
Assessment context
CISA deadline passed 1636 days ago
Microsoft Office OLE DLL Side Loading Vulnerability
CISA KEV deadline
CVE-2016-3235
Assessment context
CISA deadline passed 1636 days ago
Microsoft Office Outlook Security Feature Bypass Vulnerability
CISA KEV deadline
CVE-2017-11774
Assessment context
CISA deadline passed 1636 days ago
Microsoft Office and WordPad Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2017-0199
Assessment context
CISA deadline passed 1636 days ago

3 May 2022

SecurityMicrosoft Edge

Microsoft Edge and Internet Explorer Memory Corruption Vulnerability

CISA KEV deadline

CVE-2020-0878

Assessment context

CISA deadline passed 1636 days ago

3 May 2022

SecurityMicrosoft Internet Explorer Scripting Engine Memory Corruption Vulnerability6 source records

CISA KEV deadline · 6 entries

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CISA KEV deadline
CVE-2018-8653
Assessment context
CISA deadline passed 1636 days ago
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CISA KEV deadline
CVE-2019-1367
Assessment context
CISA deadline passed 1636 days ago
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CISA KEV deadline
CVE-2019-1429
Assessment context
CISA deadline passed 1636 days ago

Show the other 3 entries

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CISA KEV deadline
CVE-2020-0674
Assessment context
CISA deadline passed 1636 days ago
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CISA KEV deadline
CVE-2020-0968
Assessment context
CISA deadline passed 1636 days ago
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CISA KEV deadline
CVE-2020-1380
Assessment context
CISA deadline passed 1636 days ago

3 May 2022

SecurityMicrosoft MSCOMCTL.OCX Remote Code Execution Vulnerability

Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability

CISA KEV deadline

CVE-2012-0158

Assessment context

CISA deadline passed 1636 days ago

3 May 2022

SecurityMicrosoft MSHTML Remote Code Execution Vulnerability

Microsoft MSHTML Remote Code Execution Vulnerability

CISA KEV deadline

CVE-2019-0541

Assessment context

CISA deadline passed 1636 days ago

3 May 2022

SecurityMicrosoft Netlogon Privilege Escalation Vulnerability

Microsoft Netlogon Privilege Escalation Vulnerability

CISA KEV deadline

CVE-2020-1472

Assessment context

CISA deadline passed 1636 days ago

3 May 2022

SecurityMicrosoft Remote Desktop Services Remote Code Execution Vulnerability

Microsoft Remote Desktop Services Remote Code Execution Vulnerability

CISA KEV deadline

CVE-2019-0708

Assessment context

CISA deadline passed 1636 days ago

3 May 2022

SecurityMicrosoft Win32k Privilege Escalation Vulnerability7 source records

CISA KEV deadline · 7 entries

Microsoft Win32k Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2016-0167
Assessment context
CISA deadline passed 1636 days ago
Microsoft Win32k Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2016-7255
Assessment context
CISA deadline passed 1636 days ago
Microsoft Win32k Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2019-0797
Assessment context
CISA deadline passed 1636 days ago

Show the other 4 entries

Microsoft Win32k Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2019-0803
Assessment context
CISA deadline passed 1636 days ago
Microsoft Win32k Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2019-0808
Assessment context
CISA deadline passed 1636 days ago
Microsoft Win32k Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2019-0859
Assessment context
CISA deadline passed 1636 days ago
Microsoft Win32k Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2020-1054
Assessment context
CISA deadline passed 1636 days ago

3 May 2022

SecurityMicrosoft Windows Server Buffer Overflow Vulnerability

Microsoft Windows Server Buffer Overflow Vulnerability

CISA KEV deadline

CVE-2017-7269

Assessment context

CISA deadline passed 1636 days ago

3 May 2022

SecuritySharePoint

Microsoft SharePoint Remote Code Execution Vulnerability

CISA KEV deadline

CVE-2019-0604

Assessment context

CISA deadline passed 1636 days ago

3 May 2022

SecurityWindows15 source records

CISA KEV deadline · 15 entries

Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2020-0938
Assessment context
CISA deadline passed 1636 days ago
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2020-1020
Assessment context
CISA deadline passed 1636 days ago
Microsoft Windows CryptoAPI Spoofing Vulnerability
CISA KEV deadline
CVE-2020-0601
Assessment context
CISA deadline passed 1636 days ago

Show the other 12 entries

Microsoft Windows DNS Server Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2020-1350
Assessment context
CISA deadline passed 1636 days ago
Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2019-0863
Assessment context
CISA deadline passed 1636 days ago
Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2014-1812
Assessment context
CISA deadline passed 1636 days ago
Microsoft Windows Installer Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2020-0683
Assessment context
CISA deadline passed 1636 days ago
Microsoft Windows Kernel Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2020-0986
Assessment context
CISA deadline passed 1636 days ago
Microsoft Windows Kernel Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2020-17087
Assessment context
CISA deadline passed 1636 days ago
Microsoft Windows Media Center Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2016-0185
Assessment context
CISA deadline passed 1636 days ago
Microsoft Windows Print Spooler Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2021-34527
Assessment context
CISA deadline passed 1636 days ago
Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability
CISA KEV deadline
CVE-2019-1214
Assessment context
CISA deadline passed 1636 days ago
Microsoft Windows Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2019-1215
Assessment context
CISA deadline passed 1636 days ago
Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2017-0143
Assessment context
CISA deadline passed 1636 days ago
Microsoft Windows Spoofing Vulnerability
CISA KEV deadline
CVE-2020-1464
Assessment context
CISA deadline passed 1636 days ago

2 May 2022

SecurityActive Directory2 source records

CISA KEV deadline · 2 entries

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-42278
Assessment context
CISA deadline passed 1637 days ago
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
CISA KEV deadline
CVE-2021-42287
Assessment context
CISA deadline passed 1637 days ago

Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.