Microsoft & Adobe Patch Tuesday (February 2022) – Microsoft 70 Vulnerabilities with 0 Critical; Adobe 17 Vulnerabilities with 5 Critical | Qualys
Summary: Microsoft's February 2022 Patch Tuesday release addresses 70 vulnerabilities, none rated critical, though several carry High ratings in the CVSSv3.1 range of 7.0 to 8.9, and none are known to be exploited in the wild as of the writing. The fixes cover RCE flaws, a former zero-day (CVE-2022-21989), privilege escalation, spoofing, information disclosure, feature bypass, and DoS issues across products including Azure Data Explorer, Kestrel Web Server, Microsoft Edge, Windows Codecs Library, Dynamics, Office, Hyper-V, SQL Server, Visual Studio Code, and Teams; Adobe separately fixed 17 CVEs across Premiere Rush, Illustrator, Photoshop, AfterEffects, and Creative Cloud Desktop, five of them Critical.
Key Takeaway: CVE-2022-21984 is an 8.8-scored RCE in Windows DNS Server that applies whenever dynamic updates are enabled, a relatively common configuration, and an attacker who exploits it could take control of DNS and run code with elevated privileges. CVE-2022-21989, a former zero-day in the Windows kernel rated 7.8, is assessed as Exploitation More Likely, as is the 8.8 SharePoint Server RCE CVE-2022-22005.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-21984CVE-2022-21989CVE-2022-22003CVE-2022-22005
- Related
- Microsoft Patch Tuesday, February 2022 Edition Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026