Microsoft Patch Tuesday, March 2022 Edition

Summary: Microsoft released updates on Tuesday to fix at least 70 security holes in Windows and related software, with no zero-day threats for the second month running and only three fixes rated Critical. Three of the patched vulnerabilities had been publicly disclosed beforehand, including remote code execution bugs CVE-2022-24512 in .NET and Visual Studio and CVE-2022-21990 in Remote Desktop Client, plus CVE-2022-24459 in Windows Fax and Scan.
What you should know: Three publicly disclosed flaws and a trio of RDP bugs (CVE-2022-23285, CVE-2022-21990, CVE-2022-24503) that Rapid7 and Immersive Labs flag as a ransomware favorite give attackers a head start before many organizations finish patching.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2022-21967 CVE-2022-21990 CVE-2022-23277 CVE-2022-23285 CVE-2022-24459 CVE-2022-24503 CVE-2022-24508 CVE-2022-24512
Related: Microsoft Patch Tuesday for March 2022 — Snort rules and prominent vulnerabilities Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026