WEEKLY BRIEFING · 23 MAY – 29 MAY 2022 · UTC
Full source inventory · public sources only
Week 21 sources
No new MSRC release that week. CISA added 35 Microsoft CVEs to its Known Exploited Vulnerabilities catalog.
35Microsoft CVEs added to CISA KEV
Security to act on35
- CVE-2016-7256 — Microsoft Windows Open Type Font Remote Code Execution VulnerabilityKEV 25 May
- CVE-2016-3393 — Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution VulnerabilityKEV 25 May
- CVE-2016-0034 — Microsoft Silverlight Runtime Remote Code Execution VulnerabilityKEV 25 May
- CVE-2015-6175 — Microsoft Windows Kernel Privilege Escalation VulnerabilityKEV 25 May
- CVE-2015-2425 — Microsoft Internet Explorer Memory Corruption VulnerabilityKEV 25 May
- CVE-2015-2360 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 25 May
- CVE-2015-1769 — Microsoft Windows Mount Manager Privilege Escalation VulnerabilityKEV 25 May
- CVE-2015-1671 — Microsoft Windows Remote Code Execution VulnerabilityKEV 25 May
- CVE-2015-0071 — Microsoft Internet Explorer ASLR Bypass VulnerabilityKEV 25 May
- CVE-2015-0016 — Microsoft Windows TS WebProxy Directory Traversal VulnerabilityKEV 25 May
- CVE-2014-4148 — Microsoft Windows Remote Code Execution VulnerabilityKEV 25 May
- CVE-2014-4123 — Microsoft Internet Explorer Privilege Escalation VulnerabilityKEV 25 May
- CVE-2014-4077 — Microsoft IME Japanese Privilege Escalation VulnerabilityKEV 25 May
- CVE-2014-2817 — Microsoft Internet Explorer Privilege Escalation VulnerabilityKEV 25 May
- CVE-2013-7331 — Microsoft Internet Explorer Information Disclosure VulnerabilityKEV 25 May
- CVE-2013-3896 — Microsoft Silverlight Information Disclosure VulnerabilityKEV 25 May
- CVE-2013-0074 — Microsoft Silverlight Double Dereference VulnerabilityKEV 25 May
- CVE-2018-8611 — Microsoft Windows Kernel Privilege Escalation VulnerabilityKEV 24 May
- CVE-2017-8543 — Microsoft Windows Search Remote Code Execution VulnerabilityKEV 24 May
- CVE-2017-0210 — Microsoft Internet Explorer Privilege Escalation VulnerabilityKEV 24 May
- CVE-2017-0149 — Microsoft Internet Explorer Memory Corruption VulnerabilityKEV 24 May
- CVE-2017-0147 — Microsoft Windows SMBv1 Information Disclosure VulnerabilityKEV 24 May
- CVE-2017-0022 — Microsoft XML Core Services Information Disclosure VulnerabilityKEV 24 May
- CVE-2017-0005 — Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation VulnerabilityKEV 24 May
- CVE-2016-3351 — Microsoft Internet Explorer and Edge Information Disclosure VulnerabilityKEV 24 May
- CVE-2016-3298 — Microsoft Internet Explorer Messaging API Information Disclosure VulnerabilityKEV 24 May
- CVE-2016-0162 — Microsoft Internet Explorer Information Disclosure VulnerabilityKEV 24 May
- CVE-2020-1027 — Microsoft Windows Kernel Privilege Escalation VulnerabilityKEV 23 May
- CVE-2020-0638 — Microsoft Update Notification Manager Privilege Escalation VulnerabilityKEV 23 May
- CVE-2019-1385 — Microsoft Windows AppX Deployment Extensions Privilege Escalation VulnerabilityKEV 23 May
- CVE-2019-1130 — Microsoft Windows AppX Deployment Service Privilege Escalation VulnerabilityKEV 23 May
- CVE-2019-0880 — Microsoft Windows Privilege Escalation VulnerabilityKEV 23 May
- CVE-2019-0703 — Microsoft Windows SMB Information Disclosure VulnerabilityKEV 23 May
- CVE-2019-0676 — Microsoft Internet Explorer Information Disclosure VulnerabilityKEV 23 May
- CVE-2018-8589 — Microsoft Win32k Privilege Escalation VulnerabilityKEV 23 May
From the community1
Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.