Windows Flaw Under Attack - Warned Microsoft

Diving into details

• The Microsoft zero day vulnerability is tracked as CVE-2022-37969, which was abused in an exploit chain associated with limited, targeted attacks.
• The flaw is rated 7.8 out of 10 on the CVSS scale.
• Successful exploitation of the vulnerability can enable a threat actor to gain system privileges.
• However, the technique doesn’t allow for RCE if they don’t have access to the target system.

Microsoft Patch Tuesday

• This patch covers at least 64 new bugs in Windows and OS components, consisting of RCE flaws in Dynamics CRM, Office and Office components, SharePoint, Chromium-based Microsoft Edge, and Windows Defender.
• The InDesign update was the largest patch with eight critical-rated and 10 important-rated vulnerabilities.
• The patch for Photoshop came with 10 CVEs, nine of which are critical-rated. 
• Furthermore, Adobe Animate received patches for two critical-rated code execution flaws.

The bottom line