cve.bz

Microsoft Patch Tuesday, January 2022: the CVEs

Filter

Microsoft Patch Tuesday January 2022: the CVEs Microsoft published on 11 January 2022, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Dec 2021, Nov 2021, Oct 2021, Sep 2021, Aug 2021, Jul 2021, Jun 2021, May 2021, Apr 2021, Mar 2021, Feb 2021, Jan 2021. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 6.1CVE-2022-21970EPSS 2.7%

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  2. 9.0CVE-2022-21969EPSS 1.1%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  3. 5.5CVE-2022-21964EPSS 1.0%

    Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability

  4. 6.8CVE-2022-21963EPSS 0.7%

    Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

  5. 6.8CVE-2022-21962EPSS 0.8%

    Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

  6. 6.8CVE-2022-21961EPSS 0.8%

    Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

  7. 6.8CVE-2022-21960EPSS 0.8%

    Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

  8. 6.8CVE-2022-21959EPSS 0.8%

    Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

  9. 6.8CVE-2022-21958EPSS 0.8%

    Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

  10. 6.1CVE-2022-21954EPSS 1.6%

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  11. 5.4CVE-2022-21932EPSS 1.1%

    Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

  12. 4.2CVE-2022-21931EPSS 1.3%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  13. 4.2CVE-2022-21930EPSS 1.3%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  14. 2.5CVE-2022-21929EPSS 1.5%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  15. 6.4CVE-2022-21928EPSS 0.7%

    Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

  16. 5.3CVE-2022-21925EPSS 3.1%

    Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability

  17. 5.3CVE-2022-21924EPSS 3.1%

    Workstation Service Remote Protocol Security Feature Bypass Vulnerability

  18. 8.8CVE-2022-21922EPSS 2.9%

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

  19. 4.4CVE-2022-21921EPSS 0.9%

    Windows Defender Credential Guard Security Feature Bypass Vulnerability

  20. 8.8CVE-2022-21920EPSS 2.9%

    Windows Kerberos Elevation of Privilege Vulnerability

  21. 7.0CVE-2022-21919KEVEPSS 2.6%

    Windows User Profile Service Elevation of Privilege Vulnerability

  22. 6.5CVE-2022-21918EPSS 1.1%

    DirectX Graphics Kernel File Denial of Service Vulnerability

  23. 7.8CVE-2022-21917EPSS 3.8%

    HEVC Video Extensions Remote Code Execution Vulnerability

  24. 7.8CVE-2022-21916EPSS 1.0%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  25. 6.5CVE-2022-21915EPSS 2.9%

    Windows GDI+ Information Disclosure Vulnerability

  26. 7.8CVE-2022-21914EPSS 0.7%

    Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

  27. 7.5CVE-2022-21913EPSS 2.8%

    Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass

  28. 7.8CVE-2022-21912EPSS 0.7%

    DirectX Graphics Kernel Remote Code Execution Vulnerability

  29. 7.5CVE-2022-21911EPSS 3.2%

    .NET Framework Denial of Service Vulnerability

  30. 7.8CVE-2022-21910EPSS 0.6%

    Microsoft Cluster Port Driver Elevation of Privilege Vulnerability

  31. 7.8CVE-2022-21908EPSS 0.9%

    Windows Installer Elevation of Privilege Vulnerability

  32. 9.8CVE-2022-21907ExploitEPSS 93%

    HTTP Protocol Stack Remote Code Execution Vulnerability

  33. 5.5CVE-2022-21906EPSS 1.1%

    Windows Defender Application Control Security Feature Bypass Vulnerability

  34. 8.0CVE-2022-21905EPSS 0.7%

    Windows Hyper-V Security Feature Bypass Vulnerability

  35. 7.5CVE-2022-21904EPSS 3.7%

    Windows GDI Information Disclosure Vulnerability

  36. 7.8CVE-2022-21903EPSS 0.8%

    Windows GDI Elevation of Privilege Vulnerability

  37. 7.8CVE-2022-21902EPSS 0.7%

    Windows DWM Core Library Elevation of Privilege Vulnerability

  38. 8.0CVE-2022-21901EPSS 0.9%

    Windows Hyper-V Elevation of Privilege Vulnerability

  39. 4.6CVE-2022-21900EPSS 0.7%

    Windows Hyper-V Security Feature Bypass Vulnerability

  40. 5.5CVE-2022-21899EPSS 1.5%

    Windows Extensible Firmware Interface Security Feature Bypass Vulnerability

  41. 9.8CVE-2022-21898EPSS 2.5%

    DirectX Graphics Kernel Remote Code Execution Vulnerability

  42. 7.8CVE-2022-21897EPSS 1.1%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  43. 7.0CVE-2022-21896EPSS 0.6%

    Windows DWM Core Library Elevation of Privilege Vulnerability

  44. 7.8CVE-2022-21895EPSS 1.3%

    Windows User Profile Service Elevation of Privilege Vulnerability

  45. 4.4CVE-2022-21894EPSS 9.1%

    Secure Boot Security Feature Bypass Vulnerability

  46. 8.0CVE-2022-21893EPSS 8.6%

    Remote Desktop Protocol Remote Code Execution Vulnerability

  47. 6.8CVE-2022-21892EPSS 0.8%

    Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

  48. 4.3CVE-2022-21891EPSS 1.6%

    Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability

  49. 7.5CVE-2022-21890EPSS 3.2%

    Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

  50. 7.5CVE-2022-21889EPSS 3.2%

    Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

  51. 7.8CVE-2022-21888EPSS 2.7%

    Windows Modern Execution Server Remote Code Execution Vulnerability

  52. 7.8CVE-2022-21887EPSS 1.1%

    Win32k Elevation of Privilege Vulnerability

  53. 7.8CVE-2022-21885EPSS 0.7%

    Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

  54. 7.8CVE-2022-21884EPSS 0.7%

    Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

  55. 7.5CVE-2022-21883EPSS 4.6%

    Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

  56. 7.8CVE-2022-21882KEVExploitEPSS 59%

    Win32k Elevation of Privilege Vulnerability

  57. 7.0CVE-2022-21881EPSS 25%

    Windows Kernel Elevation of Privilege Vulnerability

  58. 7.5CVE-2022-21880EPSS 4.1%

    Windows GDI+ Information Disclosure Vulnerability

  59. 7.8CVE-2022-21879EPSS 1.0%

    Windows Kernel Elevation of Privilege Vulnerability

  60. 7.8CVE-2022-21878EPSS 2.8%

    Windows Geolocation Service Remote Code Execution Vulnerability

  61. 5.5CVE-2022-21877EPSS 2.9%

    Storage Spaces Controller Information Disclosure Vulnerability

  62. 5.5CVE-2022-21876EPSS 1.3%

    Win32k Information Disclosure Vulnerability

  63. 7.8CVE-2022-21875EPSS 0.7%

    Windows Storage Elevation of Privilege Vulnerability

  64. 9.8CVE-2022-21874EPSS 2.5%

    Windows Security Center API Remote Code Execution Vulnerability

  65. 7.8CVE-2022-21873EPSS 0.7%

    Tile Data Repository Elevation of Privilege Vulnerability

  66. 7.8CVE-2022-21872EPSS 0.7%

    Windows Event Tracing Elevation of Privilege Vulnerability

  67. 7.8CVE-2022-21871EPSS 0.7%

    Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability

  68. 7.8CVE-2022-21870EPSS 0.7%

    Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability

  69. 7.8CVE-2022-21869EPSS 0.7%

    Clipboard User Service Elevation of Privilege Vulnerability

  70. 7.0CVE-2022-21868EPSS 0.7%

    Windows Devices Human Interface Elevation of Privilege Vulnerability

  71. 7.0CVE-2022-21867EPSS 0.7%

    Windows Push Notifications Apps Elevation of Privilege Vulnerability

  72. 7.0CVE-2022-21866EPSS 0.6%

    Windows System Launcher Elevation of Privilege Vulnerability

  73. 7.0CVE-2022-21865EPSS 0.8%

    Connected Devices Platform Service Elevation of Privilege Vulnerability

  74. 7.0CVE-2022-21864EPSS 0.8%

    Windows UI Immersive Server API Elevation of Privilege Vulnerability

  75. 7.0CVE-2022-21863EPSS 0.7%

    Windows StateRepository API Server file Elevation of Privilege Vulnerability

  76. 7.0CVE-2022-21862EPSS 0.6%

    Windows Application Model Core API Elevation of Privilege Vulnerability

  77. 7.8CVE-2022-21861EPSS 0.7%

    Task Flow Data Engine Elevation of Privilege Vulnerability

  78. 7.0CVE-2022-21860EPSS 0.8%

    Windows AppContracts API Server Elevation of Privilege Vulnerability

  79. 7.0CVE-2022-21859EPSS 0.6%

    Windows Accounts Control Elevation of Privilege Vulnerability

  80. 7.8CVE-2022-21858EPSS 0.7%

    Windows Bind Filter Driver Elevation of Privilege Vulnerability

  81. 8.8CVE-2022-21857EPSS 2.6%

    Active Directory Domain Services Elevation of Privilege Vulnerability

  82. 9.0CVE-2022-21855EPSS 0.9%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  83. 7.8CVE-2022-21852EPSS 0.7%

    Windows DWM Core Library Elevation of Privilege Vulnerability

  84. 8.8CVE-2022-21851EPSS 2.9%

    Remote Desktop Client Remote Code Execution Vulnerability

  85. 8.8CVE-2022-21850EPSS 2.9%

    Remote Desktop Client Remote Code Execution Vulnerability

  86. 9.8CVE-2022-21849EPSS 6.6%

    Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

  87. 7.5CVE-2022-21848EPSS 4.4%

    Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

  88. 6.5CVE-2022-21847EPSS 1.0%

    Windows Hyper-V Denial of Service Vulnerability

  89. 9.0CVE-2022-21846EPSS 1.1%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  90. 7.5CVE-2022-21843EPSS 3.6%

    Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

  91. 7.8CVE-2022-21842EPSS 2.4%

    Microsoft Word Remote Code Execution Vulnerability

  92. 7.8CVE-2022-21841EPSS 2.7%

    Microsoft Excel Remote Code Execution Vulnerability

  93. 8.8CVE-2022-21840EPSS 3.3%

    Microsoft Office Remote Code Execution Vulnerability

  94. 5.5CVE-2022-21839EPSS 1.5%

    Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability

  95. 7.8CVE-2022-21838EPSS 1.5%

    Windows Cleanup Manager Elevation of Privilege Vulnerability

  96. 8.8CVE-2022-21837EPSS 3.2%

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  97. 7.8CVE-2022-21836EPSS 0.7%

    Windows Certificate Spoofing Vulnerability

  98. 7.8CVE-2022-21835EPSS 0.7%

    Microsoft Cryptographic Services Elevation of Privilege Vulnerability

  99. 7.8CVE-2022-21834EPSS 0.7%

    Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability

  100. 7.8CVE-2022-21833EPSS 0.7%

    Virtual Machine IDE Drive Elevation of Privilege Vulnerability