Weekly briefing
Week 5 · 30 Jan – 5 Feb 2023 UTC · assess the changes, then plan the next dates.
Act on1
-
Oracle E-Business Suite Unspecified Vulnerability
CVE-2022-21587
Coming up3
-
Patch Tuesday, 14 February 2023
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
-
Microsoft Office Publisher Security Feature Bypass Vulnerability
CVE-2023-21715
Same day: CISA KEV deadline: Microsoft Windows Graphic Component Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
-
Microsoft Exchange Server Privilege Escalation Vulnerability
CVE-2022-41080
Same day: CISA KEV deadline: Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability
Changed1
-
VMSA-2023-0003:VMware Workstation update addresses an arbitrary file deletion vulnerability
VMware security advisories (Broadcom)
How this list is chosen
Changes from 30 Jan 2023 – 5 Feb 2023 UTC and dates due up to 7 Mar 2023. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.
Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.
The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.