Patch days / March 2022

Microsoft Patch Tuesday — March 2022

Tuesday, 8 March 2022

Vulnerabilities: 70
Critical: 0
High: 49
Zero-days: 0
Public exploit: 2

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Public exploit code 2

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2022-23277 Public exploit Microsoft Exchange Server Remote Code Execution Vulnerability
EPSS 41%
Medium 6.5
CVE-2022-23253 Public exploit Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
EPSS 56%

All vulnerabilities 70

High49 Show

High 8.8
CVE-2022-23277 Public exploit Microsoft Exchange Server Remote Code Execution Vulnerability
EPSS 41%
High 8.8
CVE-2022-21990 Remote Desktop Client Remote Code Execution Vulnerability
EPSS 19%
High 8.8
CVE-2022-23285 Remote Desktop Client Remote Code Execution Vulnerability
EPSS 26%
High 8.8
CVE-2022-23294 Windows Event Tracing Remote Code Execution Vulnerability
EPSS 2.3%
High 8.8
CVE-2022-24508 Win32 File Enumeration Remote Code Execution Vulnerability
EPSS 2.5%
High 8.1
CVE-2022-24469 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.8%
High 7.8
CVE-2022-22006 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2022-22007 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2022-23266 Microsoft Defender for IoT Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2022-23282 Paint 3D Remote Code Execution Vulnerability
EPSS 2.4%
High 7.8
CVE-2022-23290 Windows Inking COM Elevation of Privilege Vulnerability
High 7.8
CVE-2022-23291 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2022-23293 Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2022-23295 Raw Image Extension Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2022-23296 Windows Installer Elevation of Privilege Vulnerability
High 7.8
CVE-2022-23299 Windows PDEV Elevation of Privilege Vulnerability
EPSS 7.6%
High 7.8
CVE-2022-23300 Raw Image Extension Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2022-23301 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2022-24451 VP9 Video Extensions Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2022-24452 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2022-24453 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2022-24454 Windows Security Support Provider Interface Elevation of Privilege Vulnerability
High 7.8
CVE-2022-24455 Windows CD-ROM Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2022-24456 HEVC Video Extensions Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2022-24457 HEIF Image Extensions Remote Code Execution Vulnerability
EPSS 2.3%
High 7.8
CVE-2022-24459 Windows Fax and Scan Service Elevation of Privilege Vulnerability
High 7.8
CVE-2022-24461 Microsoft Office Visio Remote Code Execution Vulnerability
EPSS 3%
High 7.8
CVE-2022-24501 VP9 Video Extensions Remote Code Execution Vulnerability
EPSS 2.6%
High 7.8
CVE-2022-24507 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
EPSS 3.9%
High 7.8
CVE-2022-24509 Microsoft Office Visio Remote Code Execution Vulnerability
EPSS 3%
High 7.8
CVE-2022-24510 Microsoft Office Visio Remote Code Execution Vulnerability
EPSS 3%
High 7.5
CVE-2022-24464 .NET and Visual Studio Denial of Service Vulnerability
EPSS 3.4%
High 7.2
CVE-2022-23265 Microsoft Defender for IoT Remote Code Execution Vulnerability
EPSS 2.9%
High 7.2
CVE-2022-23284 Windows Print Spooler Elevation of Privilege Vulnerability
EPSS 3.2%
High 7.2
CVE-2022-24467 Azure Site Recovery Remote Code Execution Vulnerability
EPSS 2.4%
High 7.2
CVE-2022-24468 Azure Site Recovery Remote Code Execution Vulnerability
EPSS 2.4%
High 7.2
CVE-2022-24470 Azure Site Recovery Remote Code Execution Vulnerability
EPSS 2.4%
High 7.2
CVE-2022-24471 Azure Site Recovery Remote Code Execution Vulnerability
EPSS 2.4%
High 7.2
CVE-2022-24517 Azure Site Recovery Remote Code Execution Vulnerability
EPSS 2.4%
High 7.2
CVE-2022-24520 Azure Site Recovery Remote Code Execution Vulnerability
EPSS 2.4%
High 7.0
CVE-2022-21967 Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability
High 7.0
CVE-2022-23283 Windows ALPC Elevation of Privilege Vulnerability
High 7.0
CVE-2022-23286 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
EPSS 4.3%
High 7.0
CVE-2022-23287 Windows ALPC Elevation of Privilege Vulnerability
High 7.0
CVE-2022-23288 Windows DWM Core Library Elevation of Privilege Vulnerability
High 7.0
CVE-2022-23298 Windows NT OS Kernel Elevation of Privilege Vulnerability
High 7.0
CVE-2022-24460 Tablet Windows User Interface Application Elevation of Privilege Vulnerability
EPSS 2%
High 7.0
CVE-2022-24505 Windows ALPC Elevation of Privilege Vulnerability
High 7.0
CVE-2022-24525 Windows Update Stack Elevation of Privilege Vulnerability

Medium19 Show

Medium 6.5
CVE-2022-23253 Public exploit Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
EPSS 56%
Medium 6.5
CVE-2022-24463 Microsoft Exchange Server Spoofing Vulnerability
EPSS 32%
Medium 6.5
CVE-2022-24506 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.8%
Medium 6.5
CVE-2022-24515 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.8%
Medium 6.5
CVE-2022-24518 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.8%
Medium 6.5
CVE-2022-24519 Azure Site Recovery Elevation of Privilege Vulnerability
EPSS 2.8%
Medium 6.5
CVE-2022-24522 Skype Extension for Chrome Information Disclosure Vulnerability
EPSS 2.3%
Medium 6.3
CVE-2022-24512 .NET and Visual Studio Remote Code Execution Vulnerability
EPSS 1.6%
Medium 6.1
CVE-2022-24526 Visual Studio Code Spoofing Vulnerability
EPSS 1.6%
Medium 5.9
CVE-2022-23278 Microsoft Defender for Endpoint Spoofing Vulnerability
EPSS 1.9%
Medium 5.5
CVE-2022-21973 Windows Media Center Update Denial of Service Vulnerability
Medium 5.5
CVE-2022-23281 Windows Common Log File System Driver Information Disclosure Vulnerability
EPSS 1.1%
Medium 5.5
CVE-2022-23297 Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
Medium 5.5
CVE-2022-24462 Microsoft Word Security Feature Bypass Vulnerability
EPSS 2%
Medium 5.5
CVE-2022-24511 Microsoft Office Word Tampering Vulnerability
EPSS 1.1%
Medium 5.4
CVE-2022-24503 Remote Desktop Protocol Client Information Disclosure Vulnerability
EPSS 2.4%
Medium 4.7
CVE-2022-21975 Windows Hyper-V Denial of Service Vulnerability
Medium 4.4
CVE-2022-22010 Media Foundation Information Disclosure Vulnerability
EPSS 2.6%
Medium 4.3
CVE-2022-24502 Windows HTML Platforms Security Feature Bypass Vulnerability
EPSS 33%

Low2 Show

Low 3.3
CVE-2022-21977 Media Foundation Information Disclosure Vulnerability
EPSS 2.5%
Low 3.3
CVE-2022-24465 Microsoft Intune Portal for iOS Security Feature Bypass Vulnerability