Microsoft Patch Tuesday for May 2022 — Snort rules and prominent vulnerabilities
Summary: Microsoft's May 2022 Patch Tuesday fixed 74 vulnerabilities, including seven rated critical, after more than 140 issues were disclosed in April. The highest-rated flaw was CVE-2022-26937 in Windows Network File System, scored 9.8 out of 10, which an attacker could exploit with an unauthenticated, specially crafted call to an NFS service to gain remote code execution.
What you should know: The top flaw of the month needs no credentials to reach an NFS service, and Microsoft flagged six other vulnerabilities as more likely to be exploited, so the gap between patch release and deployment is the exposure window an attacker will use.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-21972CVE-2022-23270CVE-2022-26923CVE-2022-26931CVE-2022-26937CVE-2022-29972
- Related
- CVE-2022-26923: Microsoft Active Directory Domain Services Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Aug 18, 2022Microsoft Patch Tuesday, May 2022 Edition Cyber Risks ·