July 2022 Patch Tuesday | Microsoft Releases 84 Vulnerabilities with 4 Critical, plus 2 Microsoft Edge (Chromium-Based) | Qualys
Summary: Microsoft fixed 84 vulnerabilities in its July 2022 Patch Tuesday update, four of them critical and allowing remote code execution, and the cumulative Windows update includes the fix for one actively exploited zero-day, CVE-2022-22047, a Windows CSRSS Elevation of Privilege flaw with a CVSSv3.1 score of 7.8 that lets an attacker gain SYSTEM privileges. Microsoft also released two Microsoft Edge (Chromium-based) security updates on July 6, 2022, and Adobe issued four advisories fixing 27 vulnerabilities across Acrobat, Character Animator, Photoshop, Reader, and RoboHelp, 18 of them rated critical.
Key Takeaway: CVE-2022-22047 is already marked Exploitation Detected and yields SYSTEM privileges, so the one flaw in this batch known to be in use is also the one that hands an attacker full control of the host.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-22047CVE-2022-2294CVE-2022-2295
- Related
- CVE-2022-2294: WebRTC Heap Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Aug 25, 2022CVE-2022-22047: Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Jul 12, 2022Microsoft Patch Tuesday, July 2022 Edition Cyber Risks ·