Tripwire's August 2022 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft.
First on the patch priority list this month are patches for Microsoft Office, Outlook, and Excel that resolve 4 vulnerabilities, including denial of service, remote code execution, and security feature bypass.
Up next are patches that affect components of the Windows operating systems. These patches resolve over 55 vulnerabilities, including elevation of privilege, information disclosure, security feature bypass, remote code execution, and denial of service vulnerabilities. These vulnerabilities affect core Windows, Kernel, Secure Socket Tunneling Protocol, Windows Support Diagnostic Tools, Bluetooth Driver, point-to-point protocol, and others.
Next are patches for .NET Core and Visual Studio that resolve spoofing and remote code execution vulnerabilities.
Lastly, administrators should focus on server-side patches for Hyper-V, Active Directory Domain Services, IIS, System Center Operations Manager, and Exchange. These patches resolve remote code execution, elevation of privilege, Information Disclosure, Tampering, and Denial of Service vulnerabilities.
| BULLETIN | CVE |
|---|---|
| Microsoft Office Outlook | CVE-2022-35742 |
| Microsoft Office | CVE-2022-34717 |
| Microsoft Office Excel | CVE-2022-33648, CVE-2022-33631 |
| Microsoft Windows | CVE-2022-30194, CVE-2022-34701, CVE-2022-35745, CVE-2022-35767, CVE-2022-35766, CVE-2022-35794, CVE-2022-34702, CVE-2022-34714, CVE-2022-35743, CVE-2022-34713, CVE-2022-35760, CVE-2022-35797, CVE-2022-35750, CVE-2022-35820, CVE-2022-35769, CVE-2022-35752, CVE-2022-35753, CVE-2022-34715, CVE-2022-35757, CVE-2022-35771, CVE-2022-34705, CVE-2022-34704, CVE-2022-34710, CVE-2022-34712, CVE-2022-34709, CVE-2022-35804, CVE-2022-35768, CVE-2022-35761, CVE-2022-34707, CVE-2022-34708, CVE-2022-30197, CVE-2022-35758, CVE-2022-35747, CVE-2022-35744, CVE-2022-30133, CVE-2022-33670, CVE-2022-34703, CVE-2022-35759, CVE-2022-34706, CVE-2022-35763, CVE-2022-35762, CVE-2022-35765, CVE-2022-35764, CVE-2022-35792, CVE-2022-34699, CVE-2022-35756, CVE-2022-30144, CVE-2022-35755, CVE-2022-35793, CVE-2022-35795, CVE-2022-34690, CVE-2022-34301, CVE-2022-34302, CVE-2022-34303, CVE-2022-35746, CVE-2022-35749, CVE-2022-35754 |
| Visual Studio | CVE-2022-35825, CVE-2022-35826, CVE-2022-35777, CVE-2022-35827 |
| .NET Core | CVE-2022-34716 |
| IIS | CVE-2022-35748 |
| System Center Operations Manager | CVE-2022-33640 |
| Active Directory Domain Services | CVE-2022-34691 |
| Windows Hyper-V | CVE-2022-35751, CVE-2022-34696 |
| Microsoft Exchange Server | CVE-2022-34692, CVE-2022-21979, CVE-2022-30134, CVE-2022-24477, CVE-2022-24516, CVE-2022-21980 |
Mastering Security Configuration Management
Master Security Configuration Management with Tripwire's guide on best practices. This resource explores SCM's role in modern cybersecurity, reducing the attack surface, and achieving compliance with regulations. Gain practical insights for using SCM effectively in various environments.
