Microsoft Patch Tuesday for March 2022 — Snort rules and prominent vulnerabilities
Summary: Microsoft's March 2022 Patch Tuesday disclosed 71 vulnerabilities, including two critical issues: CVE-2022-23277, a remote code execution flaw in Exchange Server that an authenticated user could trigger through a network call, and CVE-2022-24501, a flaw in the VP9 Video Extensions app that could execute arbitrary code if a user opens a malicious video file. Microsoft reported no vulnerabilities exploited in the wild and none scoring above 8.8 out of 10, and Talos released Snort rules 59210-59217, 59220 and 59221 to detect exploitation attempts.
Why it matters: The most serious flaw, CVE-2022-23277, requires only an authenticated account to trigger remote code execution on Exchange Server - the same class of target that attackers have gone after repeatedly, and this month's patch batch carries no evidence of exploitation to tell you whether anyone is already trying.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-23277CVE-2022-24501
- Related
- Microsoft Patch Tuesday, March 2022 Edition Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026