Weekly briefing

Week 34 · 22 Aug – 28 Aug 2022 UTC · assess the changes, then plan the next dates.

All dated changes in this period

5 source records · 5 groups

25 Aug 2022

SecurityiOS and iPadOS / macOS

Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

Apple · exploited, added to CISA KEV

CVE-2021-31010

Assessment context

CISA lists it as exploited

25 Aug 2022

SecurityMicrosoft 365 Apps

Microsoft Office Remote Code Execution Vulnerability

CISA KEV deadline

CVE-2017-8570

Assessment context

CISA deadline passed 1522 days ago

25 Aug 2022

SecurityMicrosoft Internet Explorer Remote Code Execution Vulnerability

Microsoft Internet Explorer Remote Code Execution Vulnerability

CISA KEV deadline

CVE-2017-0222

Assessment context

CISA deadline passed 1522 days ago

25 Aug 2022

SecurityWindows

Microsoft Windows Code Injection Vulnerability

CISA KEV deadline

CVE-2014-6352

Assessment context

CISA deadline passed 1522 days ago

22 Aug 2022

SecurityPalo Alto Networks

Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability

Palo Alto Networks · exploited, added to CISA KEV

CVE-2022-0028

Assessment context

CISA lists it as exploited

Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.