First Patch Tuesday of 2022 Brings Fix for a Critical 'Wormable' Windows Vulnerability

Microsoft on Tuesday kicked off its first set of updates for 2022 by plugging 96 security holes across its software ecosystem, while urging customers to prioritize patching for what it calls a critical "wormable" vulnerability. Of the 96 vulnerabilities, nine are rated Critical and 89 are rated...

Microsoft Faces Wormable, Critical RCE Bug & 6 Zero-Days

Microsoft has addressed a total of 97 security vulnerabilities in its January 2022 Patch Tuesday update – nine of them rated critical – including six that are listed as publicly known zero-days. The fixes cover a swath of the computing giant’s portfolio, including: Microsoft Windows and Windows...

CVE-2022-21839

Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability...

CVE-2022-21839

CVE-2022-21839 is a Windows vulnerability in Event Tracing Discretionary Access Control List that enables DoS. Microsoft notes easy remote exploitation with authentication required; impact is Denial of Service. Remediated by the January 2022 security updates (e.g., KB5009557) addressing Windows E...

CVE-2022-21839 Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability

...

KB5009557: Windows 10 Version 1809 and Windows Server 2019 Security Update (January 2022)

The remote Windows host is missing security update 5009557. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-21836 - A denial of service DoS vulnerabilit...