Microsoft Patch Tuesday, January 2022: the CVEs

Microsoft Patch Tuesday January 2022: the CVEs Microsoft published on 11 January 2022, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Dec 2021, Nov 2021, Oct 2021, Sep 2021, Aug 2021, Jul 2021, Jun 2021, May 2021, Apr 2021, Mar 2021, Feb 2021, Jan 2021. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 9.0CVE-2022-21969EPSS 1.1%2022-01-11

   Microsoft Exchange Server Remote Code Execution Vulnerability

2. 9.8CVE-2022-21907ExploitEPSS 93%2022-01-11

   HTTP Protocol Stack Remote Code Execution Vulnerability

3. 9.8CVE-2022-21898EPSS 2.5%2022-01-11

   DirectX Graphics Kernel Remote Code Execution Vulnerability

4. 9.8CVE-2022-21874EPSS 2.5%2022-01-11

   Windows Security Center API Remote Code Execution Vulnerability

5. 9.0CVE-2022-21855EPSS 0.9%2022-01-11

   Microsoft Exchange Server Remote Code Execution Vulnerability

6. 9.8CVE-2022-21849EPSS 6.6%2022-01-11

   Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

7. 9.0CVE-2022-21846EPSS 1.1%2022-01-11

   Microsoft Exchange Server Remote Code Execution Vulnerability