Microsoft March 2022 Patch Tuesday, (Tue, Mar 8th)

CyberSafe-WP-Admin

This month we got patches for 92 vulnerabilities. Of these, 3 are critical, 3 were previously disclosed, and one is already being exploited according to Microsoft.

Among critical vulnerabilities, there is a remote code execution (RCE) affecting Microsoft Exchange Server (CVE-2022-23277). According to the advisory, to exploit this vulnerability the attacker, as an authenticated user, could attempt to trigger malicious code in the context of the server’s account through a network call. The CVSS for this vulnerability is 8.8 – the highest for this month.

The other two critical vulnerabilities are related to RCE vulnerabilities affecting  HEVC (CVE-2022-22006) and VP9 (CVE-2022-24501) video extensions. For both vulnerabilities, an attacker could exploit the vulnerability by convincing a victim to download and open a specially crafted file which could lead to a crash. The CVSS is the same for both as well: 7.8.

Now talking about the previously disclosed vulnerabilities, all three were rated as ‘important’. One of them (CVE-2022-21990) is an RCE affecting Remote Desktop Client with a CVSS of 8.8 and rated as ‘More likely’ to be exploited in the security advisory. In the case of a Remote Desktop connection, an attacker with control of a Remote Desktop Server could trigger a remote code execution (RCE) on the RDP client machine when a victim connects to the attacking server with the vulnerable Remote Desktop Client.

The second is an elevation of privilege vulnerability affecting Windows Fax and Scan Service (CVE-2022-24459) with a CVSS of 7.8 and the third is an RCE on .Net and Visual Studio with a CVSS of 6.3.

Among important vulnerabilities, there is an RCE affecting Windows Event Tracing (CVE-2022-23294). The advisory says: “an attacker with non-admin credentials can potentially carry out an exploit using this vulnerability. The authenticated attacker could potentially take advantage of this vulnerability to execute malicious code through the Event Log’s Remote Procedure Call (RPC) endpoint on the server-side”. About mitigation factors related to this vulnerability, the advisory says: “Access to the Event Log service endpoint is blocked by default and a firewall rule change is required to make the endpoint accessible from a locally triggered attack.”.

See Renato’s dashboard for a more detailed breakout: https://patchtuesdaydashboard.com/

March 2022 Security Updates

Description
CVE Disclosed Exploited Exploitability (old versions) current version Severity CVSS Base (AVG) CVSS Temporal (AVG)
.NET and Visual Studio Denial of Service Vulnerability
%%cve:2022-24464%% No No Less Likely Less Likely Important 7.5 6.5
.NET and Visual Studio Remote Code Execution Vulnerability
%%cve:2022-24512%% Yes No Less Likely Less Likely Important 6.3 5.5
Azure Site Recovery Elevation of Privilege Vulnerability
%%cve:2022-24506%% No No Less Likely Less Likely Important 6.5 5.7
%%cve:2022-24515%% No No Less Likely Less Likely Important 6.5 5.7
%%cve:2022-24469%% No No Less Likely Less Likely Important 8.1 7.1
%%cve:2022-24518%% No No Less Likely Less Likely Important 6.5 5.7
%%cve:2022-24519%% No No Less Likely Less Likely Important 6.5 5.7
Azure Site Recovery Remote Code Execution Vulnerability
%%cve:2022-24467%% No No Less Likely Less Likely Important 7.2 6.3
%%cve:2022-24468%% No No Less Likely Less Likely Important 7.2 6.3
%%cve:2022-24517%% No No Less Likely Less Likely Important 7.2 6.3
%%cve:2022-24470%% No No Less Likely Less Likely Important 7.2 6.3
%%cve:2022-24471%% No No Less Likely Less Likely Important 7.2 6.3
%%cve:2022-24520%% No No Less Likely Less Likely Important 7.2 6.3
Brotli Library Buffer Overflow Vulnerability
%%cve:2020-8927%% No No Less Likely Less Likely Important 6.5 5.7
Chromium: CVE-2022-0789 Heap buffer overflow in ANGLE
%%cve:2022-0789%% No No – – –    
Chromium: CVE-2022-0790 Use after free in Cast UI
%%cve:2022-0790%% No No – – –    
Chromium: CVE-2022-0791 Use after free in Omnibox
%%cve:2022-0791%% No No – – –    
Chromium: CVE-2022-0792 Out of bounds read in ANGLE
%%cve:2022-0792%% No No – – –    
Chromium: CVE-2022-0793 Use after free in Views
%%cve:2022-0793%% No No – – –    
Chromium: CVE-2022-0794 Use after free in WebShare
%%cve:2022-0794%% No No – – –    
Chromium: CVE-2022-0795 Type Confusion in Blink Layout
%%cve:2022-0795%% No No – – –    
Chromium: CVE-2022-0796 Use after free in Media
%%cve:2022-0796%% No No – – –    
Chromium: CVE-2022-0797 Out of bounds memory access in Mojo
%%cve:2022-0797%% No No – – –    
Chromium: CVE-2022-0798 Use after free in MediaStream
%%cve:2022-0798%% No No – – –    
Chromium: CVE-2022-0799 Insufficient policy enforcement in Installer
%%cve:2022-0799%% No No – – –    
Chromium: CVE-2022-0800 Heap buffer overflow in Cast UI
%%cve:2022-0800%% No No – – –    
Chromium: CVE-2022-0801 Inappropriate implementation in HTML parser
%%cve:2022-0801%% No No – – –    
Chromium: CVE-2022-0802 Inappropriate implementation in Full screen mode
%%cve:2022-0802%% No No – – –    
Chromium: CVE-2022-0803 Inappropriate implementation in Permissions
%%cve:2022-0803%% No No – – –    
Chromium: CVE-2022-0804 Inappropriate implementation in Full screen mode
%%cve:2022-0804%% No No – – –    
Chromium: CVE-2022-0805 Use after free in Browser Switcher
%%cve:2022-0805%% No No – – –    
Chromium: CVE-2022-0806 Data leak in Canvas
%%cve:2022-0806%% No No – – –    
Chromium: CVE-2022-0807 Inappropriate implementation in Autofill
%%cve:2022-0807%% No No – – –    
Chromium: CVE-2022-0808 Use after free in Chrome OS Shell
%%cve:2022-0808%% No No – – –    
Chromium: CVE-2022-0809 Out of bounds memory access in WebXR
%%cve:2022-0809%% No No – – –    
HEIF Image Extensions Remote Code Execution Vulnerability
%%cve:2022-24457%% No No Less Likely Less Likely Important 7.8 6.8
HEVC Video Extensions Remote Code Execution Vulnerability
%%cve:2022-23301%% No No Less Likely Less Likely Important 7.8 6.8
%%cve:2022-22006%% No No Less Likely Less Likely Critical 7.8 6.8
%%cve:2022-22007%% No No Less Likely Less Likely Important 7.8 6.8
%%cve:2022-24452%% No No Less Likely Less Likely Important 7.8 6.8
%%cve:2022-24453%% No No Less Likely Less Likely Important 7.8 6.8
%%cve:2022-24456%% No No Less Likely Less Likely Important 7.8 6.8
Media Foundation Information Disclosure Vulnerability
%%cve:2022-21977%% No No Less Likely Less Likely Important 3.3 2.9
%%cve:2022-22010%% No No Less Likely Less Likely Important 4.4 3.9
Microsoft Defender for Endpoint Spoofing Vulnerability
%%cve:2022-23278%% No No Less Likely Less Likely Important 5.9 5.2
Microsoft Defender for IoT Elevation of Privilege Vulnerability
%%cve:2022-23266%% No No Less Likely Less Likely Important 7.8 6.8
Microsoft Defender for IoT Remote Code Execution Vulnerability
%%cve:2022-23265%% No No Less Likely Less Likely Important 7.2 6.7
Microsoft Exchange Server Remote Code Execution Vulnerability
%%cve:2022-23277%% No No More Likely More Likely Critical 8.8 7.7
Microsoft Exchange Server Spoofing Vulnerability
%%cve:2022-24463%% No No Less Likely Less Likely Important 6.5 5.7
Microsoft Intune Portal for iOS Security Feature Bypass Vulnerability
%%cve:2022-24465%% No No Less Likely Less Likely Important 3.3 2.9
Microsoft Office Visio Remote Code Execution Vulnerability
%%cve:2022-24509%% No No Less Likely Less Likely Important 7.8 6.8
%%cve:2022-24461%% No No Less Likely Less Likely Important 7.8 6.8
%%cve:2022-24510%% No No Less Likely Less Likely Important 7.8 6.8
Microsoft Office Word Tampering Vulnerability
%%cve:2022-24511%% No No Less Likely Less Likely Important 5.5 4.8
Microsoft Word Security Feature Bypass Vulnerability
%%cve:2022-24462%% No No Less Likely Less Likely Important 5.5 4.8
Paint 3D Remote Code Execution Vulnerability
%%cve:2022-23282%% No No Less Likely Less Likely Important 7.8 6.8
Point-to-Point Tunneling Protocol Denial of Service Vulnerability
%%cve:2022-23253%% No No More Likely More Likely Important 6.5 5.7
Raw Image Extension Remote Code Execution Vulnerability
%%cve:2022-23295%% No No Less Likely Less Likely Important 7.8 6.8
%%cve:2022-23300%% No No Unlikely Unlikely Important 7.8 6.8
Remote Desktop Client Remote Code Execution Vulnerability
%%cve:2022-21990%% Yes No More Likely More Likely Important 8.8 7.9
%%cve:2022-23285%% No No More Likely More Likely Important 8.8 7.7
Remote Desktop Protocol Client Information Disclosure Vulnerability
%%cve:2022-24503%% No No Less Likely Less Likely Important 5.4 4.7
Skype Extension for Chrome Information Disclosure Vulnerability
%%cve:2022-24522%% No No Less Likely Less Likely Important 7.5 6.5
Tablet Windows User Interface Application Elevation of Privilege Vulnerability
%%cve:2022-24460%% No No Less Likely Less Likely Important 7.0 6.1
VP9 Video Extensions Remote Code Execution Vulnerability
%%cve:2022-24451%% No No Less Likely Less Likely Important 7.8 6.8
%%cve:2022-24501%% No No Less Likely Less Likely Critical 7.8 6.8
Visual Studio Code Spoofing Vulnerability
%%cve:2022-24526%% No No Less Likely Less Likely Important 6.1 5.3
Windows ALPC Elevation of Privilege Vulnerability
%%cve:2022-23283%% No No Less Likely Less Likely Important 7.0 6.1
%%cve:2022-23287%% No No Less Likely Less Likely Important 7.0 6.1
%%cve:2022-24505%% No No Less Likely Less Likely Important 7.0 6.1
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
%%cve:2022-24507%% No No More Likely More Likely Important 7.8 6.8
Windows CD-ROM Driver Elevation of Privilege Vulnerability
%%cve:2022-24455%% No No Less Likely Less Likely Important 7.8 6.8
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
%%cve:2022-23286%% No No More Likely More Likely Important 7.0 6.1
Windows Common Log File System Driver Information Disclosure Vulnerability
%%cve:2022-23281%% No No Less Likely Less Likely Important 5.5 4.8
Windows DWM Core Library Elevation of Privilege Vulnerability
%%cve:2022-23291%% No No Less Likely Less Likely Important 7.8 6.8
%%cve:2022-23288%% No No Less Likely Less Likely Important 7.0 6.1
Windows Event Tracing Remote Code Execution Vulnerability
%%cve:2022-23294%% No No More Likely More Likely Important 8.8 7.7
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
%%cve:2022-23293%% No No Less Likely Less Likely Important 7.8 6.8
Windows Fax and Scan Service Elevation of Privilege Vulnerability
%%cve:2022-24459%% Yes No Less Likely Less Likely Important 7.8 7.0
Windows HTML Platforms Security Feature Bypass Vulnerability
%%cve:2022-24502%% No No More Likely More Likely Important 4.3 3.9
Windows Hyper-V Denial of Service Vulnerability
%%cve:2022-21975%% No No Less Likely Less Likely Important 4.7 4.1
Windows Inking COM Elevation of Privilege Vulnerability
%%cve:2022-23290%% No No Less Likely Less Likely Important 7.8 6.8
Windows Installer Elevation of Privilege Vulnerability
%%cve:2022-23296%% No No Less Likely Less Likely Important 7.8 6.8
Windows Media Center Update Denial of Service Vulnerability
%%cve:2022-21973%% No No Less Likely Less Likely Important 5.5 4.8
Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
%%cve:2022-23297%% No No Less Likely Less Likely Important 5.5 4.8
Windows NT OS Kernel Elevation of Privilege Vulnerability
%%cve:2022-23298%% No No Less Likely Less Likely Important 7.0 6.1
Windows PDEV Elevation of Privilege Vulnerability
%%cve:2022-23299%% No No More Likely More Likely Important 7.8 6.8
Windows Print Spooler Elevation of Privilege Vulnerability
%%cve:2022-23284%% No No Less Likely Less Likely Important 7.2 6.5
Windows SMBv3 Client/Server Remote Code Execution Vulnerability
%%cve:2022-24508%% No No More Likely More Likely Important 8.8 7.7
Windows Security Support Provider Interface Elevation of Privilege Vulnerability
%%cve:2022-24454%% No No Less Likely Less Likely Important 7.8 6.8
Windows Update Stack Elevation of Privilege Vulnerability
%%cve:2022-24525%% No No Less Likely Less Likely Important 7.0 6.1
Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability
%%cve:2022-21967%% No No Less Likely Less Likely Important 7.0 6.1

—
Renato Marinho
Morphus Labs| LinkedIn|Twitter

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Reposted from SANS. View original.

CyberSafe-WP-Admin