Microsoft fixes 121 flaws — Redmondmag.com

news

August Patch Patch: Microsoft Fixes 121 Defects

Although the past few months have been lighter than usual, Microsoft’s monthly security updates are back in triple digits, fixing 121 Common Vulnerabilities and Exposures (CVEs).

In addition to numerous defect fixes, 17 critical items and one zero-day vulnerability patch are the highlights of this month’s update.

Due to the active exploitation and public disclosure of CVE-2022-34713, IT departments should apply CVE-2022-34713 promptly. This hotfix addresses a remote code execution vulnerability in the Microsoft Windows Support Diagnostic Tool (MSDT). Current exploits using this hole require the victim to open a malicious file (via a phishing attack or her compromised website).

This zero-day vulnerability shares many similarities with the June fix for the “follina” vulnerability, which is also present in MSDT. Microsoft has not confirmed that this month’s fix is ​​an update to his June patch, but has said that this particular flaw has been publicly known for several months.

In May, Microsoft released a blog providing guidance on the MSDT vulnerability and released an update shortly thereafter to address it. “Public discussion of the vulnerability may prompt further scrutiny of the component by both Microsoft security personnel and research partners. This CVE of his is commonly known as Dogwalk. will deal with.”

Next on our priority list is a critical fix for the Windows Network File System (NFS) Remote Code Execution Vulnerability (CVE-2022-34715). According to Dustin Childs of the Zero-Day Initiative, if this sounds familiar, it is. “This is his fourth month in a row of NFS code execution patches. This time his CVSS 9.8 bug could be the most serious of them all,” Childs said of his monthly patches. I am writing on my blog.

Although Microsoft only rates this flaw as “major,” Childs claims it’s critical to anyone using NFS because a successful attack grants the attacker code execution privileges. increase.

Customers running local Exchange Server will be busy this month with three important fixes that address privilege escalation flaws in Microsoft products. CVE-2022-24516, CVE-2022-21980, and CVE-2022-24477 all function similarly and, if exploited, could give criminals remote access to an entire organization’s email storage. Depending on the value of the information, it can easily be turned into an extortion ploy.

Also of note for Exchange Server users is CVE-2022-30134. This addresses yet another privilege escalation issue. However, unlike the previous three, this one is only rated as important. This is due to the complexity of running and exploiting code. This does not mean that IT departments should sit back and let this one flaw information go public.

Here’s a rundown of the important items for the rest of the month:

CVE-2022-30133 – Fix for remote code execution in Windows Point-to-Point Protocol (PPP). CVE-2022-35744 – Fix for remote code execution in Windows PPP. CVE-2022-34691 – Fix privilege escalation in Active Directory Domain Services. CVE-2022-33646 – Privilege escalation fix for Azure Batch Node Agent. CVE-2022-35752 – Fix for remote code execution in Windows Secure Socket Tunneling Protocol (SSTP). CVE-2022-35753 – Fix for remote code execution in Windows SSTP. CVE-2022-35804 – Fix for remote code execution in SMB clients and servers. CVE-2022-34696 – Fix for remote code execution on Windows Hyper-V. CVE-2022-34702 – Fix for remote code execution in Windows SSTP. CVE-2022-34714 – Fix for remote code execution in Windows SSTP. CVE-2022-35745 – Fix for remote code execution in Windows SSTP. CVE-2022-35766 – Fix for remote code execution in Windows SSTP. CVE-2022-35767 – Fix for remote code execution in Windows SSTP. CVE-2022-35794 – Fix remote code execution in Windows SSTP.

A complete list of Microsoft security updates can be found here.

What Are The Main Benefits Of Comparing Car Insurance Quotes Online

LOS ANGELES, CA / ACCESSWIRE / June 24, 2020, / Compare-autoinsurance.Org has launched a new blog post that presents the main benefits of comparing multiple car insurance quotes. For more info and free online quotes, please visit https://compare-autoinsurance.Org/the-advantages-of-comparing-prices-with-car-insurance-quotes-online/ The modern society has numerous technological advantages. One important advantage is the speed at which information is sent and received. With the help of the internet, the shopping habits of many persons have drastically changed. The car insurance industry hasn't remained untouched by these changes. On the internet, drivers can compare insurance prices and find out which sellers have the best offers. View photos The advantages of comparing online car insurance quotes are the following: Online quotes can be obtained from anywhere and at any time. Unlike physical insurance agencies, websites don't have a specific schedule and they are available at any time. Drivers that have busy working schedules, can compare quotes from anywhere and at any time, even at midnight. Multiple choices. Almost all insurance providers, no matter if they are well-known brands or just local insurers, have an online presence. Online quotes will allow policyholders the chance to discover multiple insurance companies and check their prices. Drivers are no longer required to get quotes from just a few known insurance companies. Also, local and regional insurers can provide lower insurance rates for the same services. Accurate insurance estimates. Online quotes can only be accurate if the customers provide accurate and real info about their car models and driving history. Lying about past driving incidents can make the price estimates to be lower, but when dealing with an insurance company lying to them is useless. Usually, insurance companies will do research about a potential customer before granting him coverage. Online quotes can be sorted easily. Although drivers are recommended to not choose a policy just based on its price, drivers can easily sort quotes by insurance price. Using brokerage websites will allow drivers to get quotes from multiple insurers, thus making the comparison faster and easier. For additional info, money-saving tips, and free car insurance quotes, visit https://compare-autoinsurance.Org/ Compare-autoinsurance.Org is an online provider of life, home, health, and auto insurance quotes. This website is unique because it does not simply stick to one kind of insurance provider, but brings the clients the best deals from many different online insurance carriers. In this way, clients have access to offers from multiple carriers all in one place: this website. On this site, customers have access to quotes for insurance plans from various agencies, such as local or nationwide agencies, brand names insurance companies, etc. "Online quotes can easily help drivers obtain better car insurance deals. All they have to do is to complete an online form with accurate and real info, then compare prices", said Russell Rabichev, Marketing Director of Internet Marketing Company. CONTACT: Company Name: Internet Marketing CompanyPerson for contact Name: Gurgu CPhone Number: (818) 359-3898Email: [email protected]: https://compare-autoinsurance.Org/ SOURCE: Compare-autoinsurance.Org View source version on accesswire.Com:https://www.Accesswire.Com/595055/What-Are-The-Main-Benefits-Of-Comparing-Car-Insurance-Quotes-Online View photos