Weekly briefing
Week 30 · 25 Jul – 31 Jul 2022 UTC · assess the changes, then plan the next dates.
Act on1
Coming up4
-
Patch Tuesday, 9 August 2022
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
-
Microsoft HTTP.sys Remote Code Execution Vulnerability
CVE-2015-1635
Same day: CISA KEV deadline: Microsoft SMBv1 Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Office Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft Win32k Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability; CISA KEV deadline: Microsoft SMBv3 Remote Code Execution Vulnerability
-
Microsoft Graphics Component Memory Corruption Vulnerability
CVE-2013-3906
Same day: CISA KEV deadline: Microsoft Word Memory Corruption Vulnerability; CISA KEV deadline: Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability; CISA KEV deadline: Microsoft Internet Explorer Type Confusion Vulnerability
How this list is chosen
Changes from 25 Jul 2022 – 31 Jul 2022 UTC and dates due up to 30 Aug 2022. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.
Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.
The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.