Description:
Microsoft has released security updates addressing multiple vulnerabilities which affect several Microsoft products or components. The list of security updates can be found at:
https://msrc.microsoft.com/update-guide/releaseNote/2022-Jul
Reports indicated that an elevation of privilege vulnerability (CVE-2022-22047) in Microsoft Windows and Server is being actively exploited in the wild. In addition, multiple vulnerabilities (CVE-2022-22029, CVE-2022-22038, CVE-2022-22039, CVE-2022-30216 and CVE-2022-30221) are also at a high risk of exploitation. System administrators are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.
Affected Systems:
- Microsoft Windows 7, 8.1, RT 8.1, 10, 11
- Microsoft Windows Server 2008, 2008 R2, 2012, 2012 R2, 2016, 2019, 2022
- Microsoft Windows Server, version 20H2
- Microsoft Office 2013, 2013 RT, 2016, 2019, LTSC 2021
- Microsoft 365 Apps for Enterprise
- Azure Site Recovery VMWare to Azure
- Azure Storage Blobs client library for .NET, Java, Python
- Azure Storage Queues client library for .NET, Python
- Microsoft Lync Server 2013
- Remote Desktop client for Windows Desktop
- Skype for Business Server 2015, 2019
Impact:
Depending on the vulnerability exploited, a successful attack could lead to remote code execution, denial of service, elevation of privilege, information disclosure, security feature bypass and tampering.
Recommendation:
Patches for affected products are available from the Windows Update / Microsoft Update Catalog. Users of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.
More Information:
- https://msrc.microsoft.com/update-guide/releaseNote/2022-Jul
- https://www.hkcert.org/security-bulletin/microsoft-monthly-security-update-july-2022
- https://www.cisa.gov/uscert/ncas/current-activity/2022/07/12/microsoft-releases-july-2022-security-updates
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21845
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22022 (to CVE-2022-22029)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22031
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22034
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22036 (to CVE-2022-22043)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22045
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22047 (to CVE-2022-22050)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22711
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23816
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23825
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30181
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30187
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30202 (to CVE-2022-30203)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30205 (to CVE-2022-30206)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30208 (to CVE-2022-30209)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30211 (to CVE-2022-30216)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30220 (to CVE-2022-30226)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33632 (to CVE-2022-33633)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33637
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33641 (to CVE-2022-33644)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33650 (to CVE-2022-33669)
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33671 (to CVE-2022-33678)
