loringbrister.com

04/15/2023

April 15, 2023
These common vulnerabilities and exposures (CVEs) were recently published or revised in the Microsoft Security Update Guide:
CVE-2023-2033
• Title: Chromium: CVE-2023-2033 Type Confusion in V8
• Version: 1.0
• Reason for revision: Information published.
• Originally released: April 15, 2023
• Last updated: April 15, 2023
• Aggregate CVE Severity Rating: None

09/15/2022

Title: Microsoft Security Advisory Notification
Issued: September 13, 2022
**************************************************************************************

IMPORTANT ANNOUNCEMENT: Please note that we have successfully
transitioned to the new system for delivering Microsoft Technical Security
Notifications, and after Update Tuesday on September 13, 2022 we will no longer send
notifications via the legacy Security Notification Service. If you wish to continue
receiving monthly Microsoft Security Update Summaries and Microsoft Security Update
Revisions notifications, see "Security Update Guide Notification System News:
Create your profile now"
(https://msrc-blog.microsoft.com/2022/08/09/security-update-guide-notification-system-news-create-your-profile-now/).

Security Advisory Released on September 13, 2022
======================================================================================

* ADV990001

- ADV990001 | Latest Servicing Stack Updates
- https://msrc.microsoft.com/update-guide/vulnerability/ADV990001
- Reason for Revision: Information published.
- Originally posted: September 13, 2022
- Updated: N/A
- Version: 49.0

09/15/2022

Microsoft Security Update Summary for September 13, 2022
Issued: September 13, 2022
********************************************************************

This summary lists security updates released for September 13, 2022.

Complete information for the September 2022 security update release
Can be found at .

IMPORTANT ANNOUNCEMENT: Please note that we have successfully
transitioned to the new system for delivering Microsoft Technical Security
Notifications, and after Update Tuesday on September 13, 2022 we will no
longer send notifications via the legacy Security Notification Service. If
you wish to continue receiving monthly Microsoft Security Update Summaries
and Microsoft Security Update Revisions notifications, see "Security Update
Guide Notification System News: Create your profile now"
(https://msrc-blog.microsoft.com/2022/08/09/security-update-guide-
notification-system-news-create-your-profile-now/).
Please note the following information regarding the security updates:

* Windows 10 updates are cumulative. The monthly security release
includes all security fixes for vulnerabilities that affect Windows
10, in addition to non-security updates. The updates are available
via the Microsoft Update Catalog:
https://catalog.update.microsoft.com/v7/site/Home.aspx.
* For information on lifecycle and support dates for Windows 10
operating systems, please see the Windows Lifecycle Facts Sheet:
https://support.microsoft.com/en-us/help/13853/windows-
lifecycle-fact-sheet).
* A list of the latest servicing stack updates for each operating
system can be found in ADV990001: https://msrc.microsoft.com/update-
guide/vulnerability/ADV990001. This list will be
updated whenever a new servicing stack update is released. It is
important to install the latest servicing stack update.
* In addition to security changes for the vulnerabilities, updates
include defense-in-depth updates to help improve security-related
features.
* Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008
need to purchase the Extended Security Update to continue receiving security
updates. See https://support.microsoft.com/en-us/help/4522133/procedure-to-
continue-receiving-security-updates for more information.
* There is a change coming with regards to Servicing Stack Updates. Please
see Simplifying SSUs for more information.

Critical Security Updates
============================

Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 20H2 for 32-bit Systems
Windows 10 Version 20H2 for ARM64-based Systems
Windows 10 Version 20H2 for x64-based Systems
Windows 10 Version 21H1 for 32-bit Systems
Windows 10 Version 21H1 for ARM64-based Systems
Windows 10 Version 21H1 for x64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 11 for ARM64-based Systems
Windows 11 for x64-based Systems
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows Server 2022 Azure Edition Core Hotpatch
Microsoft Dynamics CRM (on-premises) 9.0
Microsoft Dynamics CRM (on-premises) 9.1

Important Security Updates
============================

Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft 365 Apps for Enterprise for 64-bit Systems
Microsoft Office 2013 RT Service Pack 1
Microsoft Office 2013 Service Pack 1 (32-bit editions)
Microsoft Office 2013 Service Pack 1 (64-bit editions)
Microsoft Office 2016 (32-bit edition)
Microsoft Office 2016 (64-bit edition)
Microsoft Office 2019 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2019 for Mac
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office LTSC for Mac 2021
Microsoft SharePoint Enterprise Server 2013 Service Pack 1
Microsoft SharePoint Enterprise Server 2016
Microsoft SharePoint Foundation 2013 Service Pack 1
Microsoft SharePoint Server 2019
Microsoft SharePoint Server Subscription Edition
SharePoint Server Subscription Edition Language Pack
Microsoft Visio 2013 Service Pack 1 (32-bit editions)
Microsoft Visio 2013 Service Pack 1 (64-bit editions)
Microsoft Visio 2016 (32-bit edition)
Microsoft Visio 2016 (64-bit edition)
Visual Studio 2022 for Mac version 17.3
Visual Studio CodeNET 6.0NET Core 3.1
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5
Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
Microsoft .NET Framework 3.5 AND 4.7.2
Microsoft .NET Framework 3.5 AND 4.8
Microsoft .NET Framework 3.5 AND 4.8.1
Microsoft .NET Framework 3.5.1
Microsoft .NET Framework 4.6
Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2
Microsoft .NET Framework 4.8
Microsoft .NET Framework 4.8.1
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
Microsoft Visual Studio 2022 version 17.0
Microsoft Visual Studio 2022 version 17.2
Microsoft Visual Studio 2022 version 17.3
AV1 Video Extension
Raw Image Extension
Azure ARC
Azure Guest Configuration
Microsoft Defender for Endpoint for Mac

Describes how customers who have purchased the Extended Security Update (ESU) can continue to receive security updates.

09/04/2022

Title: Microsoft Security Update Releases
Issued: September 2, 2022
**************************************************************************************

IMPORTANT ANNOUNCEMENT: Please note that we have successfully transitioned to the new
system for delivering Microsoft Technical Security Notifications, and after Update
Tuesday on September 13, 2022 we will no longer send notifications via the legacy
Security Notification Service. If you wish to continue receiving monthly Microsoft
Security Update Summaries and Microsoft Security Update Revisions notifications, see
"Security Update Guide Notification System News: Create your profile now"
(https://msrc-blog.microsoft.com/2022/08/09/security-update-guide-notification-system-news-create-your-profile-now/).

Summary
=======

The following CVE was assigned by Chrome. Microsoft Edge
(Chromium-based) ingests Chromium, which addresses these vulnerabilities. Please see
Google Chrome Releases (https://chromereleases.googleblog.com/2022) for more information.

See
https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/
for more information about third-party CVEs in the Security Update Guide.

*CVE-2022-3075

Security Update Guide Supports CVEs Assigned by Industry PartnersMSRC / By MSRC Team / January 13, 2021 March 17, 2021 / CVSS, Security Update, Security Update Guide, Update Tuesday Hi Folks, This month we are introducing a new data element for each CVE in the Security Update Guide, called Assigning...

09/04/2022

Title: Microsoft Security Update Releases
Issued: September 2, 2022
**************************************************************************************

IMPORTANT ANNOUNCEMENT: Please note that we have successfully transitioned to the new
system for delivering Microsoft Technical Security Notifications, and after Update
Tuesday on September 13, 2022 we will no longer send notifications via the legacy
Security Notification Service. If you wish to continue receiving monthly Microsoft
Security Update Summaries and Microsoft Security Update Revisions notifications, see
"Security Update Guide Notification System News: Create your profile now"
(https://msrc-blog.microsoft.com/2022/08/09/security-update-guide-notification-system-news-create-your-profile-now/).

Summary
=======

The following Microsoft Edge CVE has been released on September 1, 2022.

* CVE-2022-38012

- CVE-2022-38012 | Microsoft Edge (Chromium-based) Remote Code Ex*****on Vulnerability
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38012
- Reason for Revision: Information published.
- Originally posted: September 1, 2022
- Updated: N/A
- Aggregate CVE Severity Rating: Low


The following CVEs were assigned by Chrome. Microsoft Edge
(Chromium-based) ingests Chromium, which addresses these vulnerabilities. Please see
Google Chrome Releases (https://chromereleases.googleblog.com/2022) for more information.

See
https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/
for more information about third-party CVEs in the Security Update Guide.

* CVE-2022-3038
* CVE-2022-3039
* CVE-2022-3040
* CVE-2022-3041
* CVE-2022-3044
* CVE-2022-3045
* CVE-2022-3046
* CVE-2022-3047
* CVE-2022-3053
* CVE-2022-3054
* CVE-2022-3055
* CVE-2022-3056
* CVE-2022-3057
* CVE-2022-3058

08/18/2022

Title: Microsoft Security Update Releases
Issued: August 17, 2022
**************************************************************************************

Summary
=======

The following CVE was assigned by Chrome. Microsoft Edge
(Chromium-based) ingests Chromium, which addresses these vulnerabilities. Please see
Google Chrome Releases (https://chromereleases.googleblog.com/2022) for more information.

See
https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/
for more information about third-party CVEs in the Security Update Guide.

* CVE-2022-2856

Security Update Guide Supports CVEs Assigned by Industry PartnersMSRC / By MSRC Team / January 13, 2021 March 17, 2021 / CVSS, Security Update, Security Update Guide, Update Tuesday Hi Folks, This month we are introducing a new data element for each CVE in the Security Update Guide, called Assigning...

08/16/2022

Title: Microsoft Security Update Revisions
Issued: August 15, 2022
************************************************************************************

Summary
=======

The following CVEs have undergone a revision increment.
====================================================================================

* CVE-2022-34711
* CVE-2022-35822

- CVE-2022-34711 | Windows Defender Credential Guard Elevation of Privilege
Vulnerability
- https://https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34711
- Version: 1.0
- Reason for Revision: Information published. This CVE was addressed by updates that
were released in August 2022, but the CVE was inadvertently omitted from the
August 2022 Security Updates. This is an informational change only. Customers
who have already installed the August 2022 update do not need to take any further
action.
- Originally posted: August 15, 2022
- Updated: N/A
- Aggregate CVE Severity Rating: Important

- CVE-2022-35822 | Windows Defender Credential Guard Security Feature Bypass
Vulnerability
- https://https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35822
- Version: 1.0
- Reason for Revision: Information published. This CVE was addressed by updates that
were released in August 2022, but the CVE was inadvertently omitted from the
August 2022 Security Updates. This is an informational change only. Customers
who have already installed the August 2022 update do not need to take any further
action.
- Originally posted: August 15, 2022
- Updated: N/A
- Aggregate CVE Severity Rating: Important

08/12/2022

Title: Microsoft Security Update Revisions
Issued: August 11, 2022
************************************************************************************

Summary
=======

The following CVE has undergone a revision increment.
====================================================================================

* CVE-2022-34716

- CVE-2022-34716 | .NET Spoofing Vulnerability
- https://https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34716
- Version: 2.0
- Reason for Revision: Revised the Security Updates table to include PowerShell 7.0
and PowerShell 7.2 because these versions of PowerShell 7 are affected by this
vulnerability. See https://github.com/PowerShell/Announcements/issues/33 for more
information.
- Originally posted: August 9, 2022
- Updated: August 11, 2022
- Aggregate CVE Severity Rating: Important

Microsoft Security Advisory CVE-2022-34716: .NET Information Disclosure Vulnerability Executive Summary Microsoft is releasing this security advisory to provide information about a vulnerability in...

08/10/2022

Microsoft Security Update Summary for August 9, 2022
Issued: August 9, 2022
********************************************************************

This summary lists security updates released for August 9, 2022.

Complete information for the August 2022 security update release
Can be found at .

IMPORTANT ANNOUNCEMENT: It's time to create your profile in the Security Update
Guide (SUG) and sign up to receive Microsoft Technical Security Notifications.
See Security Update Guide Notification System News: Create your profile now
(https://aka.ms/SUGNotificationProfile2) for more information.

Please note the following information regarding the security updates:

* Windows 10 updates are cumulative. The monthly security release
includes all security fixes for vulnerabilities that affect Windows
10, in addition to non-security updates. The updates are available
via the Microsoft Update Catalog:
https://catalog.update.microsoft.com/v7/site/Home.aspx.
* For information on lifecycle and support dates for Windows 10
operating systems, please see the Windows Lifecycle Facts Sheet:
https://support.microsoft.com/en-us/help/13853/windows-
lifecycle-fact-sheet).
* A list of the latest servicing stack updates for each operating
system can be found in ADV990001: https://msrc.microsoft.com/update-
guide/vulnerability/ADV990001. This list will be
updated whenever a new servicing stack update is released. It is
important to install the latest servicing stack update.
* In addition to security changes for the vulnerabilities, updates
include defense-in-depth updates to help improve security-related
features.
* Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008
need to purchase the Extended Security Update to continue receiving security
updates. See https://support.microsoft.com/en-us/help/4522133/procedure-to-
continue-receiving-security-updates for more information.
* There is a change coming with regards to Servicing Stack Updates. Please
see Simplifying SSUs for more information.

Critical Security Updates
============================

Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems
Windows 10 Version 1607 for 32-bit Systems
Windows 10 Version 1607 for x64-based Systems
Windows 10 Version 1809 for 32-bit Systems
Windows 10 Version 1809 for ARM64-based Systems
Windows 10 Version 1809 for x64-based Systems
Windows 10 Version 20H2 for 32-bit Systems
Windows 10 Version 20H2 for ARM64-based Systems
Windows 10 Version 20H2 for x64-based Systems
Windows 10 Version 21H1 for 32-bit Systems
Windows 10 Version 21H1 for ARM64-based Systems
Windows 10 Version 21H1 for x64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 11 for ARM64-based Systems
Windows 11 for x64-based Systems
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2012
Windows Server 2012 (Server Core installation)
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server 2022
Windows Server 2022 (Server Core installation)
Windows Server, version 20H2 (Server Core Installation)
Microsoft Exchange Server 2013 Cumulative Update 23
Microsoft Exchange Server 2016 Cumulative Update 22
Microsoft Exchange Server 2016 Cumulative Update 23
Microsoft Exchange Server 2019 Cumulative Update 11
Microsoft Exchange Server 2019 Cumulative Update 12
Azure Batch

Important Security Updates
============================

Microsoft 365 Apps for Enterprise for 32-bit Systems
Microsoft 365 Apps for Enterprise for 64-bit Systems
Microsoft Excel 2013 RT Service Pack 1
Microsoft Excel 2013 Service Pack 1 (32-bit editions)
Microsoft Excel 2013 Service Pack 1 (64-bit editions)
Microsoft Excel 2016 (32-bit edition)
Microsoft Excel 2016 (64-bit edition)
Microsoft Office 2013 RT Service Pack 1
Microsoft Office 2013 Service Pack 1 (32-bit editions)
Microsoft Office 2013 Service Pack 1 (64-bit editions)
Microsoft Office 2016 (32-bit edition)
Microsoft Office 2016 (64-bit edition)
Microsoft Office 2019 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office Online Server
Microsoft Outlook 2013 RT Service Pack 1
Microsoft Outlook 2013 Service Pack 1 (32-bit editions)
Microsoft Outlook 2013 Service Pack 1 (64-bit editions)
Microsoft Outlook 2016 (32-bit edition)
Microsoft Outlook 2016 (64-bit edition) NET 6.0NET Core 3.1
Microsoft Visual Studio 2012 Update 5
Microsoft Visual Studio 2013 Update 5
Microsoft Visual Studio 2015 Update 3
Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8)
Microsoft Visual Studio 2022 version 17.0
Microsoft Visual Studio 2022 version 17.2
System Center Operations Manager (SCOM) 2016
System Center Operations Manager (SCOM) 2019
System Center Operations Manager (SCOM) 2022
Open Management Infrastructure
Azure Real Time Operating System GUIX Studio
Azure Site Recovery VMWare to Azure
Azure Sphere

08/10/2022

Title: Microsoft Security Update Revisions
Issued: August 9, 2022
************************************************************************************

Summary
=======

The following CVEs and advisories have undergone a revision increment.
====================================================a================================

* CVE-2022-26832
* CVE-2022-30130
* ADV200011
* ADV990001

- CVE-2022-26832 | .NET Framework Denial of Service Vulnerability
- https://https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26832
- Version: 4.0
- Reason for Revision: To comprehensively address this vulnerability, Microsoft has
released Monthly Rollup KB5016268 for .NET Framework 3.5 installed on Windows 8.1
and Windows Server 2012 R2. Microsoft strongly recommends that customers install
the update to be fully protected from the vulnerability. Customers whose systems
are configured to receive automatic updates do not need to take any further action.
- Originally posted: April 12, 2022
- Updated: August 9, 2022
- Aggregate CVE Severity Rating: Important

- CVE-2022-30130 | .NET Framework Denial of Service Vulnerability
- https://https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-30130
- Version: 2.0
- Reason for Revision: To comprehensively address this vulnerability, Microsoft has
released Monthly Rollup KB5016268 for .NET Framework 3.5 installed on Windows 8.1
and Windows Server 2012 R2. Microsoft strongly recommends that customers install
the update to be fully protected from the vulnerability. Customers whose systems
are configured to receive automatic updates do not need to take any further action.
- Originally posted: May 10, 2022
- Updated: August 9, 2022
- Aggregate CVE Severity Rating: Low

- ADV200011 | Microsoft Guidance for Addressing Security Feature Bypass in GRUB
- https://https://msrc.microsoft.com/update-guide/vulnerability/ADV200011
- Version: 4.0
- Reason for Revision: To comprehensively address this vulnerability, Microsoft has
released Monthly Rollup KB5016268 for .NET Framework 3.5 installed on Windows 8.1
and Windows Server 2012 R2. Microsoft strongly recommends that customers install
the update to be fully protected from the vulnerability. Customers whose systems
are configured to receive automatic updates do not need to take any further action.
- Originally posted: July 29, 2020
- Updated: August 9, 2022
- Aggregate CVE Severity Rating: Important

- ADV990001 | Latest Servicing Stack Updates
- https://https://msrc.microsoft.com/update-guide/vulnerability/ADV990001
- Version: 48.0
- Reason for Revision: Advisory updated to announce new versions of Servicing Stack
Updates are available. Please see the FAQ for details.
- Originally posted: November 13, 2018
- Updated: August 9, 2022
- Aggregate CVE Severity Rating: Critical

08/06/2022

Title: Microsoft Security Update Releases
Issued: August 5, 2022
**************************************************************************************

Summary
=======

The following Microsoft Edge CVEs have been released on August 5, 2022.

* CVE-2022-33636
* CVE-2022-33649
* CVE-2022-35796

- CVE-2022-33636 | Microsoft Edge (Chromium-based) Remote Code Ex*****on Vulnerability
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33636
- Reason for Revision: Information published.
- Originally posted: August 5, 2022
- Updated: N/A
- Aggregate CVE Severity Rating: Moderate

- CVE-2022-33649 | Microsoft Edge (Chromium-based) Security Feature Bypass
Vulnerability
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33649
- Reason for Revision: Information published.
- Originally posted: August 5, 2022
- Updated: N/A
- Aggregate CVE Severity Rating: Important

- CVE-2022-35796 | Microsoft Edge (Chromium-based) Elevation of Privilege
Vulnerability
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35796
- Reason for Revision: Information published.
- Originally posted: August 5, 2022
- Updated: N/A
- Aggregate CVE Severity Rating: Low


The following CVEs were assigned by Chrome. Microsoft Edge
(Chromium-based) ingests Chromium, which addresses these vulnerabilities. Please see
Google Chrome Releases (https://chromereleases.googleblog.com/2022) for more information.

See
https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/
for more information about third-party CVEs in the Security Update Guide.

* CVE-2022-2603
* CVE-2022-2604
* CVE-2022-2605
* CVE-2022-2606
* CVE-2022-2610
* CVE-2022-2611
* CVE-2022-2612
* CVE-2022-2614
* CVE-2022-2615
* CVE-2022-2616
* CVE-2022-2617
* CVE-2022-2618
* CVE-2022-2619
* CVE-2022-2621
* CVE-2022-2622
* CVE-2022-2623
* CVE-2022-2624

Security Update Guide Supports CVEs Assigned by Industry PartnersMSRC / By MSRC Team / January 13, 2021 March 17, 2021 / CVSS, Security Update, Security Update Guide, Update Tuesday Hi Folks, This month we are introducing a new data element for each CVE in the Security Update Guide, called Assigning...

07/26/2022

Title: Microsoft Security Update Releases
Issued: July 25, 2022
**************************************************************************************

Summary
=======

The following CVE has undergone a revision increment.
====================================================================================

* CVE-2022-33637

- CVE-2022-33637 | Microsoft Defender for Endpoint Tampering Vulnerability
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-33637
- Version: 1.1
- Reason for Revision: Added FAQ information. This is an informational change
only.
- Originally posted: July 12, 2022
- Updated: July 25, 2022
- Aggregate CVE Severity Rating: Important

====================================================================================

The following CVEs were assigned by Chrome. Microsoft Edge
(Chromium-based) ingests Chromium, which addresses these vulnerabilities. Please see
Google Chrome Releases (https://chromereleases.googleblog.com/2022) for more information.

See
https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/
for more information about third-party CVEs in the Security Update Guide.

* CVE-2022-2477
* CVE-2022-2478
* CVE-2022-2479
* CVE-2022-2480
* CVE-2022-2481

Revision Information:
=====================

- Version 1.0
- Reason for Revision: Information published.
- Originally posted: July 21, 2022

Security Update Guide Supports CVEs Assigned by Industry PartnersMSRC / By MSRC Team / January 13, 2021 March 17, 2021 / CVSS, Security Update, Security Update Guide, Update Tuesday Hi Folks, This month we are introducing a new data element for each CVE in the Security Update Guide, called Assigning...