No Critical CVEs Fixed in February Patch Tuesday

Method directors ended up blessed with a fairly peaceful Patch Tuesday this week, immediately after Microsoft launched fixes for 48 CVEs, which includes a single that experienced been publicly disclosed but not still exploited.

CVE-2022-21989 is an elevation of privilege vulnerability in the Windows kernel that was previously disclosed. It impacts Windows 7-11 and Windows Server 2008-2022.

“While Microsoft has not noticed exploitation of this vulnerability, they do assess the vulnerability as ‘Exploitation Far more Most likely,’ meaning that exploitation of the vulnerability is really probable and that it must be prioritized for patching,” argued Recorded Future’s senior security architect, Allan Liska.

He also urged admins to address CVE-2022-22005, a distant code execution vulnerability in Microsoft’s Sharepoint Server.

Although labeled “important,” it also has an exploitation assessment of “Exploitation A lot more Most likely.” It impacts SharePoint Server versions 2013-2019 and the SharePoint Server Subscription Version.

“The vulnerability does demand an attacker to be authenticated in buy to exploit it, which is possible why Microsoft only labeled it ‘important.’ However, given the amount of stolen qualifications easily offered on underground marketplaces, acquiring authenticated could be trivial,” argued Liska.

“Organizations that have general public-facing SharePoint servers ought to prioritize utilizing this patch.”

In other places, Ivanti solution management VP, Chris Goettl, pointed to four CVEs in Windows Print Spooler, making it possible for elevation of privileges: CVE-2022-21999, CVE-2022-21997, CVE-2022-22718, and CVE-2022-22717.

“Three of these vulnerabilities experienced acknowledgments to exterior researchers. This signifies two factors. To start with that Print Spooler even now has a bit of publicity becoming cleaned up put up Print Nightmare and 2nd that there are several exterior white hat scientists even now digging in so you can guess danger actors are probably executing the same,” he stated.

“Also, there have been many variations to Print Spooler, so check your printer performance perfectly this cycle.”

Unusually for Microsoft’s every month security update round, none of the vulnerabilities tackled had been rated critical. However, businesses ought to usually prioritize CVEs for patching in accordance to their own particular risk assessments. 

Some areas of this write-up are sourced from:
www.infosecurity-journal.com