Patch days / February 2022

Microsoft Patch Tuesday — February 2022

Tuesday, 8 February 2022

Vulnerabilities: 51
Critical: 0
High: 36
Zero-days: 0
Public exploit: 5

Exploited 3

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.8
CVE-2022-21999 Exploited Public exploit Windows Print Spooler Elevation of Privilege Vulnerability
EPSS 41%
High 7.8
CVE-2022-21971 Exploited Public exploit Windows Runtime Remote Code Execution Vulnerability
EPSS 54%
High 7.8
CVE-2022-22718 Exploited Public exploit Windows Print Spooler Elevation of Privilege Vulnerability
EPSS 18%

Public exploit code 2

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 7.8
CVE-2022-21974 Public exploit Roaming Security Rights Management Services Remote Code Execution Vulnerability
EPSS 5%
High 7.8
CVE-2022-22715 Public exploit Named Pipe File System Elevation of Privilege Vulnerability
EPSS 14%

All vulnerabilities 51

High36 Show

High 7.8
CVE-2022-21999 Exploited Public exploit Windows Print Spooler Elevation of Privilege Vulnerability
EPSS 41%
High 7.8
CVE-2022-21971 Exploited Public exploit Windows Runtime Remote Code Execution Vulnerability
EPSS 54%
High 7.8
CVE-2022-22718 Exploited Public exploit Windows Print Spooler Elevation of Privilege Vulnerability
EPSS 18%
High 8.8
CVE-2022-21984 Windows DNS Server Remote Code Execution Vulnerability
EPSS 4.8%
High 8.8
CVE-2022-22005 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 17%
High 8.8
CVE-2022-23274 Microsoft Dynamics GP Remote Code Execution Vulnerability
EPSS 2.1%
High 8.1
CVE-2022-21991 Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability
EPSS 2.1%
High 8.1
CVE-2022-23256 Azure Data Explorer Spoofing Vulnerability
EPSS 1.6%
High 8.1
CVE-2022-23272 Microsoft Dynamics GP Elevation Of Privilege Vulnerability
EPSS 2.6%
High 8.0
CVE-2022-21987 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 2%
High 7.9
CVE-2022-21995 Windows Hyper-V Remote Code Execution Vulnerability
High 7.8
CVE-2022-21974 Public exploit Roaming Security Rights Management Services Remote Code Execution Vulnerability
EPSS 5%
High 7.8
CVE-2022-22715 Public exploit Named Pipe File System Elevation of Privilege Vulnerability
EPSS 14%
High 7.8
CVE-2022-21844 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2022-21926 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2022-21927 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2022-21981 Windows Common Log File System Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2022-21988 Microsoft Office Visio Remote Code Execution Vulnerability
EPSS 2.9%
High 7.8
CVE-2022-21989 Windows Kernel Elevation of Privilege Vulnerability
EPSS 3.2%
High 7.8
CVE-2022-21992 Windows Mobile Device Management Remote Code Execution Vulnerability
EPSS 2.5%
High 7.8
CVE-2022-21994 Windows DWM Core Library Elevation of Privilege Vulnerability
EPSS 4.2%
High 7.8
CVE-2022-21996 Win32k Elevation of Privilege Vulnerability
EPSS 3%
High 7.8
CVE-2022-22000 Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 4.3%
High 7.8
CVE-2022-22001 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
High 7.8
CVE-2022-22003 Microsoft Office Graphics Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2022-22004 Microsoft Office ClickToRun Remote Code Execution Vulnerability
EPSS 2.6%
High 7.8
CVE-2022-22709 VP9 Video Extensions Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2022-23276 SQL Server for Linux Containers Elevation of Privilege Vulnerability
High 7.7
CVE-2022-23263 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
High 7.5
CVE-2022-21965 Microsoft Teams Denial of Service Vulnerability
EPSS 3%
High 7.5
CVE-2022-21986 .NET Denial of Service Vulnerability
EPSS 3.6%
High 7.5
CVE-2022-21993 Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
EPSS 44%
High 7.2
CVE-2022-21957 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
EPSS 2.7%
High 7.1
CVE-2022-21997 Windows Print Spooler Elevation of Privilege Vulnerability
High 7.1
CVE-2022-23273 Microsoft Dynamics GP Elevation Of Privilege Vulnerability
EPSS 2.2%
High 7.0
CVE-2022-22717 Windows Print Spooler Elevation of Privilege Vulnerability

Medium15 Show

Medium 6.5
CVE-2022-23271 Microsoft Dynamics GP Elevation Of Privilege Vulnerability
EPSS 3.8%
Medium 6.3
CVE-2022-23262 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
EPSS 1.2%
Medium 5.9
CVE-2022-23255 Microsoft OneDrive for Android Security Feature Bypass Vulnerability
Medium 5.6
CVE-2022-22712 Windows Hyper-V Denial of Service Vulnerability
Medium 5.5
CVE-2022-21985 Windows Remote Access Connection Manager Information Disclosure Vulnerability
Medium 5.5
CVE-2022-21998 Windows Common Log File System Driver Information Disclosure Vulnerability
Medium 5.5
CVE-2022-22002 Windows User Account Profile Picture Denial of Service Vulnerability
EPSS 1.3%
Medium 5.5
CVE-2022-22710 Windows Common Log File System Driver Denial of Service Vulnerability
Medium 5.5
CVE-2022-22716 Microsoft Excel Information Disclosure Vulnerability
EPSS 4.6%
Medium 5.5
CVE-2022-23252 Microsoft Office Information Disclosure Vulnerability
Medium 5.4
CVE-2022-23269 Microsoft Dynamics GP Spoofing Vulnerability
EPSS 1.2%
Medium 5.3
CVE-2022-23261 Microsoft Edge (Chromium-based) Tampering Vulnerability
EPSS 1.6%
Medium 5.3
CVE-2022-23280 Microsoft Outlook for Mac Security Feature Bypass Vulnerability
EPSS 2.4%
Medium 4.9
CVE-2022-23254 Microsoft Power BI Information Disclosure Vulnerability
EPSS 2.6%
Medium 4.3
CVE-2022-21968 Microsoft SharePoint Server Security Feature Bypass Vulnerability
EPSS 2.1%