Microsoft March 2022 Patch Tuesday updates fix 89 vulnerabilities

Microsoft March 2022 Patch Tuesday security updates address 89 vulnerabilities in multiple products, including 3 zero-days.

Microsoft March 2022 Patch Tuesday security updates address 89 vulnerabilities in multiple products, including Microsoft Windows components, Azure and Azure DevOps, Azure Sphere, Internet Explorer and Edge (EdgeHTML), Exchange Server, Office and Office Services and Web Apps, SharePoint Server, Visual Studio, and Windows Hyper-V.

The update includes fixes for 7 flaws in MS Exchange and 21 Microsoft Edge vulnerabilities. 14 vulnerabilities have been rated as Critical and 75 are listed as Important in severity. Two of these vulnerabilities are listed as publicly known while five are actively exploited.

Three flaws addressed by the Microsoft March 2022 Patch Tuesday security updates are zero-day issues, and for two of them, CVE-2022-21990 and CVE-2022-24459, public exploits are available.

• CVE-2022-21990 – Remote Desktop Client Remote Code Execution Vulnerability
• CVE-2022-24459 – Windows Fax and Scan Service Elevation of Privilege Vulnerability
• CVE-2022-24512 – .NET and Visual Studio Remote Code Execution Vulnerability

None of the above zero-day have been exploited in attacks.

The most severe flaws fixed by the IT giant are:

• CVE-2021-26867 – Windows Hyper-V Remote Code Execution Vulnerability (CVSS 9.9)
• CVE-2021-26897 – Windows DNS Server Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2021-27080 – Azure Sphere Unsigned Code Execution Vulnerability (CVSS 9.3)

Below is the complete list of vulnerabilities addressed by Microsoft:

Follow me on Twitter: @securityaffairs and Facebook

Pierluigi Paganini

(SecurityAffairs – hacking, Microsoft March 2022 Patch Tuesday)

[adrotate banner=”5″]

[adrotate banner=”13″]

Share On