Cyber Risks · Qualys Blog

August 2022 Patch Tuesday | Microsoft Releases 121 Vulnerabilities With 17 Critical, Plus 20 Microsoft Edge (Chromium-Based); Adobe Releases 5 Advisories, 25 Vulnerabilities With 15 Critical. | Qualys

Summary: Microsoft's August 2022 Patch Tuesday fixed 121 vulnerabilities, 17 of them critical, including two zero-days (CVE-2022-34713 and CVE-2022-30134) with one actively exploited in attacks. Microsoft also released 20 Edge (Chromium-based) updates on August 5, and Adobe issued five advisories covering 25 vulnerabilities, 15 rated critical, across Acrobat and Reader, Commerce, FrameMaker, Illustrator, and Premiere Elements.

What's compelling: One of the two zero-days was already being exploited in the wild, and the Dogwalk-variant flaw had been reported back in 2019 but was not considered dangerous at the time because it required significant user interaction - a reminder that deferred patches accumulate real exposure.

Read the original at Qualys Blog ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2022-30134CVE-2022-34713
Related