Microsoft Patch Tuesday for June 2022 — Snort rules and prominent vulnerabilities

Summary: Microsoft's June 2022 security update disclosed 55 vulnerabilities across its firmware and software, with one rated critical, 40 high severity, and the rest moderate. The most serious is CVE-2022-30136, an unauthenticated remote code execution flaw in the Windows NFS service (NFSv4.1) scoring 9.8, which an attacker can trigger over the network with a specially crafted call.
What's compelling: A 9.8-severity flaw that needs no credentials and is reachable over the network means any exposed NFSv4.1 service is a direct path to remote code execution, and the only mitigation Talos cites is disabling that version and restarting the server.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2022-30136 CVE-2022-30141 CVE-2022-30153 CVE-2022-30157 CVE-2022-30160 CVE-2022-30161 CVE-2022-30163 CVE-2022-30164 CVE-2022-30165
Related: Threat Source newsletter (June 16, 2022) — Three top takeaways from Cisco Live Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026