First Patch Tuesday of 2022 Brings Fix for a Critical 'Wormable' Windows Vulnerability

Microsoft on Tuesday kicked off its first set of updates for 2022 by plugging 96 security holes across its software ecosystem, while urging customers to prioritize patching for what it calls a critical "wormable" vulnerability. Of the 96 vulnerabilities, nine are rated Critical and 89 are rated...

Microsoft & Adobe Patch Tuesday (January 2022) – Microsoft 126 Vulnerabilities with 9 Critical, Adobe 41 Vulnerabilities, 22 critical

Microsoft Patch Tuesday – January 2022 Microsoft patched 126 vulnerabilities in their January 2022 Patch Tuesday release. Out of these, nine are rated as critical severity. As of this writing, none of the 126 vulnerabilities are known to be actively exploited. Microsoft has fixed problems in thei...

‘Wormable’ Flaw Leads January 2022 Patch Tuesday

Microsoft today released updates to plug nearly 120 security holes in Windows and supported software. Six of the vulnerabilities were publicly detailed already, potentially giving attackers a head start in figuring out how to exploit them in unpatched systems. More concerning, Microsoft warns tha...

Microsoft Faces Wormable, Critical RCE Bug & 6 Zero-Days

Microsoft has addressed a total of 97 security vulnerabilities in its January 2022 Patch Tuesday update – nine of them rated critical – including six that are listed as publicly known zero-days. The fixes cover a swath of the computing giant’s portfolio, including: Microsoft Windows and Windows...

CVE-2022-21969

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2022-21969

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2022-21969

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2022-21855

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2022-21855

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2022-21846

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2022-21846

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2022-21846

Microsoft Exchange Server Remote Code Execution Vulnerability...

Remote code execution

Microsoft Exchange Server Remote Code Execution Vulnerability...

Remote code execution

Microsoft Exchange Server Remote Code Execution Vulnerability...

Remote code execution

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2022-21969 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2022-21969

CVE-2022-21969 is a Microsoft Exchange Server Remote Code Execution vulnerability identified in the Exchange certificate handling RPC path. The root cause described in the connected material centers on deserialization of crafted ExchangeCertificateRpc input via a BinaryFormatter-based chain (Exch...

CVE-2022-21855 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2022-21846 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2022-21846

CVE-2022-21846 (Microsoft Exchange Server) is a remote code execution vulnerability in Exchange Server that stems from unsafe deserialization within the ExchangeCertificateRpc path. The RPC workflow can deserialize untrusted input via ExchangeCertificateRpc.DeserializeObject, which uses a BinaryF...