Microsoft Patch Tuesday, February 2022 Edition
Summary: Microsoft released February 2022 security updates fixing four dozen flaws in Windows and related software, none rated critical and none zero-day, including 18 elevation-of-privilege vulnerabilities and four in the Print Spooler component. Microsoft also said it will begin blocking Internet macros by default in Office, previewing the change in April and rolling it out to Microsoft 365 users in June, with standalone Office 2013-2021 to follow.
What you should know: Among the patched flaws is CVE-2022-22005 in SharePoint Server 2013-2019, which requires an authenticated attacker - and as Recorded Future's Allan Liska noted, stolen credentials on underground markets make that trivial, so public-facing SharePoint servers should be prioritized.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-21882CVE-2022-21989CVE-2022-21996CVE-2022-22005
- Related
- CVE-2022-21882: Microsoft Win32k Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Feb 04, 2022