Weekly briefing
Week 22 · 30 May – 5 Jun 2022 UTC · assess the changes, then plan the next dates.
Act on1
Coming up4
-
Microsoft Win32k Privilege Escalation Vulnerability
CVE-2018-8589
Same day: CISA KEV deadline: Microsoft Internet Explorer Information Disclosure Vulnerability; CISA KEV deadline: Microsoft Windows SMB Information Disclosure Vulnerability; CISA KEV deadline: Microsoft Windows Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Update Notification Manager Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Kernel Privilege Escalation Vulnerability
-
Patch Tuesday, 14 June 2022
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
-
Microsoft Internet Explorer Information Disclosure Vulnerability
CVE-2016-0162
Same day: CISA KEV deadline: Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability; CISA KEV deadline: Microsoft Internet Explorer and Edge Information Disclosure Vulnerability; CISA KEV deadline: Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft XML Core Services Information Disclosure Vulnerability; CISA KEV deadline: Microsoft Windows SMBv1 Information Disclosure Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Search Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Kernel Privilege Escalation Vulnerability
-
Microsoft Silverlight Double Dereference Vulnerability
CVE-2013-0074
Same day: CISA KEV deadline: Microsoft Silverlight Information Disclosure Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Information Disclosure Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft IME Japanese Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows TS WebProxy Directory Traversal Vulnerability; CISA KEV deadline: Microsoft Internet Explorer ASLR Bypass Vulnerability; CISA KEV deadline: Microsoft Windows Mount Manager Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Win32k Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Windows Kernel Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Silverlight Runtime Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Windows Open Type Font Remote Code Execution Vulnerability
How this list is chosen
Changes from 30 May 2022 – 5 Jun 2022 UTC and dates due up to 5 Jul 2022. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.
Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.
The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.