Microsoft Patch Tuesday for July 2022 — Snort rules and prominent vulnerabilities
Summary: Microsoft's July 2022 Patch Tuesday disclosed more than 80 vulnerabilities across its software, hardware and firmware, including three critical remote code execution flaws in Windows and one vulnerability actively exploited in the wild. The actively exploited flaw, CVE-2022-22047, is a local privilege escalation rated important, while the three critical flaws - CVE-2022-22029, CVE-2022-22038 and CVE-2022-22039 - involve Windows Network File System and were assessed by Microsoft as less likely to be exploited.
Bottom line: One of the more than 80 flaws fixed this month was already being exploited in the wild, and it carried only an important rating - a reminder that severity labels do not track attacker interest.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-22029CVE-2022-22038CVE-2022-22039CVE-2022-22047CVE-2022-33646
- Related
- CVE-2022-22047: Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Jul 12, 2022Microsoft Patch Tuesday, July 2022 Edition Cyber Risks ·