Microsoft April 2022 Security Updates

Patch Tuesday (rev 7)

Microsoft releases the Patch Tuesday every month. But it never stop there. Between April 13 and April 25 (today), there are new updates, from 145 vulns to 156 vulns, to the Patch Tuesday.

Links:

• April 2002 Microsoft Security Updates [April 13]
  

April 2002 Microsoft Security Updates

April 2022 MS Security Updates

Quick summary:

• Total 145 vulnerabilities for Apr 2022.
• At least 1 CVE is exploited in wild. [cve-2022-24521]
  
• 3 CVE are rated with CVSS 8.5.
• At least 10 vulns are found likely to be exploited.
• 47 vulns are RCE.
• 9 vulns are DoS.

3 Days Left to Patch

There are 66 vulnerabilities is going to reach the deadline on April 15 based on the CISA KEV Directive.

These include:

• 7 vulnerabilities from Microsoft including the SMBv1 vulnerability (CVE-2017-0146).
• 33 RCE vulnerabilities including 2 from Apache. 
• 2 DoS attacks to Cisco BGP.

kev-dashboard.py