Microsoft Patch Tuesday for August 2022 — Snort rules and prominent vulnerabilities
Summary: Microsoft's August 2022 Patch Tuesday disclosed more than 120 vulnerabilities, including 15 critical ones and a fix for CVE-2022-34713, an MSDT flaw Microsoft says is actively exploited in the wild. The release also covers two critical Exchange Server elevation-of-privilege flaws (CVE-2022-21980 and CVE-2022-24477) and three critical Windows Point-to-Point Tunneling Protocol flaws, including CVE-2022-35744 with a CVSS score of 9.8.
What's compelling: One flaw in this batch is already being exploited, and MSDT was the target of the Follina zero-day just two months earlier - so the patch window for CVE-2022-34713 is not theoretical.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-21980CVE-2022-24477CVE-2022-30133CVE-2022-34713CVE-2022-35743CVE-2022-35744CVE-2022-35747CVE-2022-35804
- Related
- Microsoft Patch Tuesday, August 2022 Edition Cyber Risks ·CVE-2022-34713: Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Aug 09, 2022