VMSA-2022-0024:VMware Tools update addresses a local privilege escalation vulnerability
Security advisory · VMware security advisories (Broadcom)
Assessment context
The vendor rates it high
Weekly briefing
Week 33 · 15 Aug – 21 Aug 2022 UTC · assess the changes, then plan the next dates.
All dated changes in this period
13 source records · 12 groupsCommunityEvotec (Przemysław Kłys)
Adaptive Cards with Tables and Linebreaks in Microsoft Teams
Community post · Evotec (Przemysław Kłys)
SecurityGoogle Chrome
Google Chromium Intents Insufficient Input Validation Vulnerability
Google · exploited, added to CISA KEV
CVE-2022-2856
Assessment context
CISA lists it as exploited
SecurityPalo Alto Networks
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
Palo Alto Networks · exploited, added to CISA KEV
CVE-2017-15944
Assessment context
CISA lists it as exploited
SecurityiOS and iPadOS / macOS2 source records
Apple · exploited, added to CISA KEV · 2 entries
- Apple iOS and macOS Out-of-Bounds Write Vulnerability
Apple · exploited, added to CISA KEV
CVE-2022-32893
Assessment context
CISA lists it as exploited
- Apple iOS and macOS Out-of-Bounds Write Vulnerability
Apple · exploited, added to CISA KEV
CVE-2022-32894
Assessment context
CISA lists it as exploited
SecurityActive Directory
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
Added to CISA KEV
CVE-2022-26923
Assessment context
CISA lists it as exploited
SecurityWindows
Microsoft Windows Runtime Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2022-21971
Assessment context
CISA lists it as exploited
Updates and guidanceIntune
Updates to Windows Autopilot device targeting infrastructure
Product change · Windows Autopilot changes
SecurityMicrosoft 365 Apps
Microsoft Word Memory Corruption Vulnerability
CISA KEV deadline
CVE-2014-1761
Assessment context
CISA deadline passed 1532 days ago
SecurityMicrosoft Graphics Component Memory Corruption Vulnerability
Microsoft Graphics Component Memory Corruption Vulnerability
CISA KEV deadline
CVE-2013-3906
Assessment context
CISA deadline passed 1532 days ago
SecurityMicrosoft Internet Explorer Type Confusion Vulnerability
Microsoft Internet Explorer Type Confusion Vulnerability
CISA KEV deadline
CVE-2019-0752
Assessment context
CISA deadline passed 1532 days ago
SecurityWindows
Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
CISA KEV deadline
CVE-2018-8174
Assessment context
CISA deadline passed 1532 days ago
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.