Microsoft Patch Tuesday for Feb. 2022 — Snort rules and prominent vulnerabilities
Summary: Microsoft's February 2022 Patch Tuesday disclosed 51 vulnerabilities, none rated critical and none exploited in the wild or publicly disclosed at the time. Notable entries include CVE-2022-21997, CVE-2022-21999 and CVE-2022-22715, all privilege elevation flaws in the print spooler service, plus CVE-2022-22005, a SharePoint remote code execution vulnerability scored 8.8 out of 10 that requires an authenticated attacker with page creation permissions.
Why it matters: The print spooler flaws would let an adversary execute code as a system user or higher, and the SharePoint RCE carries an 8.8 severity score despite Microsoft rating the month's set as non-critical - a reminder that severity labels and practical exposure do not always line up.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-21997CVE-2022-21999CVE-2022-22005CVE-2022-22715
- Related
- CVE-2022-21999: Microsoft Windows Print Spooler Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022Microsoft Patch Tuesday, February 2022 Edition Cyber Risks ·