2022 FR April Patch Tuesday

1. Patch Tuesday Webinar Thursday, April 14, 2022 Hosted by Genci Myrtezai and Elise Dupont

2. Agenda April 2022 Patch Tuesday Overview In the News Bulletins and Releases Between Patch Tuesdays Q & A

3. Overview

4. Copyright © 2022 Ivanti. All rights reserved. April Patch Tuesday 2022 Spring is in full swing! There were several updates leading to April Patch Tuesday you need to be aware of. Spring4Shell vulnerability updates were released for multiple versions of Apache Tomcat and a variety of VMware products. Google Chrome and Mozilla Firefox received updates leading up to Patch Tuesday as well. Adobe released a large update for Acrobat and Reader this Patch Tuesday and Microsoft provided us with 17 updates -12 rated Critical. Check out the Ivanti April Patch Tuesday blog for more details on the Zero Day and Publicly Disclosed vulnerabilities and key areas to focus your testing this month spending your time and efforts effectively!

5. In the News

6. Copyright © 2022 Ivanti. All rights reserved. In the News  Spring4Shell flaw is being used to spread botnet malware  https://www.zdnet.com/article/spring4shell-flaw-is-now-being-used-to- spread-this-botnet-malware/  https://www.microsoft.com/security/blog/2022/04/04/springshell-rce- vulnerability-guidance-for-protecting-against-and-detecting-cve-2022- 22965/  OpenSSL vulnerability can ‘definitely be weaponized’  https://www.scmagazine.com/analysis/application-security/openssl- vulnerability-can-definitely-be-weaponized-nsa-cyber-director-says  https://www.securityweek.com/cybersecurity-vendors-assessing-impact- recent-openssl-vulnerability  Russian Hackers Tried Attacking Ukraine's Power Grid  https://thehackernews.com/2022/04/russian-hackers-tried-attacking.html

7. Copyright © 2022 Ivanti. All rights reserved. Publicly Disclosed Vulnerability  CVE-2022-26904 Windows User Profile Service Elevation of Privilege Vulnerability  CVSS 3.1 Scores: 7.0 / 6.5  Severity: Important  Impacts all Windows workstation and server operating systems. Known Exploited Vulnerability  CVE-2022-24521 Windows Common Log File System Driver Elevation of Privilege Vulnerability  CVSS 3.1 Scores: 7.8 / 7.2  Severity: Important  Impacts all Windows workstation and server operating systems.

8. Copyright © 2022 Ivanti. All rights reserved. Microsoft Patch Tuesday Updates of Interest  Advisory 990001 Latest Servicing Stack Updates (SSU)  https://msrc.microsoft.com/update-guide/en-US/vulnerability/ADV990001  Updated SSUs this month  Windows Server 2012  Windows 8.1/Server 2012 R2  Windows 10 (as shown)  Development Tool and Other Updates  Azure Site Recovery VMWare to Azure  Visual Studio 2022 (multiple)  Visual Studio 2019 (multiple)  Visual Studio 2017 (multiple)  Visual Studio Code  YARP 1.0/1.1RC Source: Microsoft

9. Copyright © 2022 Ivanti. All rights reserved. Windows 10 and 11 Lifecycle Awareness Windows 10 Enterprise and Education Version Release Date End of Support Date 21H2 11/16/2021 6/11/2024 21H1 5/18/2021 12/13/2022 20H2 10/20/2020 5/9/2023 1909 11/12/2019 5/10/2022 Windows 10 Home and Pro Version Release Date End of Support Date 21H2 11/16/2021 6/13/2023 21H1 5/18/2021 12/13/2022 20H2 10/20/2020 5/10/2022 Windows Datacenter and Standard Server Version Release Date End of Support Date 2022 8/18/2021 10/13/2026 20H2 10/20/2020 5/10/2022 Windows 11 Home and Pro Version Release Date End of Support Date 21H2 10/4/2021 10/10/2023  Lifecycle Fact Sheet  https://docs.microsoft.com/en-us/lifecycle/faq/windows

11. Copyright © 2022 Ivanti. All rights reserved. Patch Content Announcements  Announcements Posted on Community Forum Pages  https://forums.ivanti.com/s/group/CollaborationGroup/00Ba0000009oKICEA2  Subscribe to receive email for the desired product(s)

12. Bulletins and Releases

13. Copyright © 2022 Ivanti. All rights reserved. APSB22-16: Security Update for Adobe Acrobat and Reader  Maximum Severity: Critical  Affected Products: Adobe Acrobat and Reader (all current versions)  Description: Adobe has released security updates for Adobe Acrobat and Reader for Windows and macOS. These updates address multiple critical, important and moderate vulnerabilities. Of the 62 reported vulnerabilities, 35 are rated Critical. See https://helpx.adobe.com/security/products/acrobat/apsb22-16.html for complete details.  Impact: Remote Code Execution, Security Feature Bypass, Elevation of Privilege, and Information Disclosure  Fixes 62 Vulnerabilities: See link to Adobe bulletin  Restart Required: Requires application restart

14. Copyright © 2022 Ivanti. All rights reserved. MS22-04-W11: Windows 11 Update  Maximum Severity: Critical  Affected Products: Microsoft Windows 11 Version 21H2 and Edge Chromium  Description: This bulletin references KB 5012592.  Impact: Remote Code Execution, Denial of Service, Elevation of Privilege and Information Disclosure  Fixes 67 Vulnerabilities: CVE-2022-24521 is known exploited and CVE-2022- 26904 is publicly disclosed. See the Security Update Guide for the complete list of CVEs.  Restart Required: Requires restart  Known Issues: See next slide

15. Copyright © 2022 Ivanti. All rights reserved. April Known Issues for Windows 11  KB 5012592 – Windows 11  [Recovery Fail] After installing the Windows updates released January 11, 2022 or later Windows versions on an affected version of Windows, recovery discs (CD or DVD) created by using the Backup and Restore (Windows 7) app in Control Panel might be unable to start. Workaround: None. Microsoft is working on a resolution. Note: No third-party backup or recovery apps are currently known to be affected by this issue.

16. Copyright © 2022 Ivanti. All rights reserved. MS22-04-W10: Windows 10 Update  Maximum Severity: Critical  Affected Products: Microsoft Windows 10 Versions 1607, 1809, 1909, 2004, 20H2, 21H1, 21H2, Server 2016, Server 2019, Server 2022, Server version 1909, Server version 2004, Server version 20H2, Server 21H1, IE 11, and Edge Chromium  Description: This bulletin references 6 KB articles. See KBs for the list of changes.  Impact: Remote Code Execution, Denial of Service, Elevation of Privilege and Information Disclosure  Fixes 97 Vulnerabilities: CVE-2022-24521 is known exploited and CVE-2022- 26904 is publicly disclosed. See the Security Update Guide for the complete list of CVEs.  Restart Required: Requires restart  Known Issues: See next slides

17. Copyright © 2022 Ivanti. All rights reserved. April Known Issues for Windows 10  KB 5012653 – Windows 10  [Recovery Fail]  KB 5012596 – Windows 10, version 1607, Windows Server 2016  [AD Forest Trust] After installing updates released January 11, 2022 or later, apps that use the Microsoft .NET Framework to acquire or set Active Directory Forest Trust Information might have issues. The apps might fail or close or you might receive an error from the app or Windows. You might also receive an access violation (0xc0000005) error. Workaround: To resolve this issue manually, apply the out-of-band updates for the version of the .NET Framework used by the app. Note: These out-of-band updates are not available from Windows Update and will not install automatically. See KB for a list of .NET links.  [Recovery Fail]

18. Copyright © 2022 Ivanti. All rights reserved. April Known Issues for Windows 10 (cont)  KB 5012647 – Windows 10 Enterprise 2019 LTSC, Windows 10 IoT Enterprise 2019 LTSC, Windows 10 IoT Core 2019 LTSC, Windows Server 2019  [Asian Packs] After installing KB 4493509, devices with some Asian language packs installed may receive the error, "0x800f0982 - PSFX_E_MATCHING_COMPONENT_NOT_FOUND.“ Workaround: Uninstall and reinstall any recently added language packs or select Check for Updates and install the April 2019 Cumulative Update. See KB for more recovery details. Microsoft is working on a resolution.  [Cluster Update] After installing KB 5001342 or later, the Cluster Service might fail to start because a Cluster Network Driver is not found. Workaround: This issue occurs because of an update to the PnP class drivers used by this service. After about 20 minutes, you should be able to restart your device and not encounter this issue. For more information about the specific errors, cause, and workaround for this issue, please see KB 5003571.  [AD Forest Trust] and [Recovery Fail]

19. Copyright © 2022 Ivanti. All rights reserved. April Known Issues for Windows 10  KB 5012591 – Windows 10 Enterprise, version 1909 Windows 10 Enterprise and Education, version 1909  [Recovery Fail]  KB 5012599 –Windows 10 version 20H2, Windows Server version 20H2, Windows 10 version 21H1  [Scavaged] After installing the June 21, 2021 (KB5003690) update, some devices cannot install new updates, such as the July 6, 2021 (KB5004945) or later updates. You will receive the error message, "PSFX_E_MATCHING_BINARY_MISSING". Workaround: In place upgrade. For more information and a workaround, see KB5005322.

20. Copyright © 2022 Ivanti. All rights reserved. April Known Issues for Windows 10 (cont)  KB 5012599 –Windows 10 version 20H2, Windows Server version 20H2, Windows 10 version 21H1 (cont)  [Edge Removed] Devices with Windows installations created from custom offline media or custom ISO image might have Microsoft Edge Legacy removed by this update, but not automatically replaced by the new Microsoft Edge. Devices that connect directly to Windows Update to receive updates are not affected. Workaround: Slipstream the SSU released March 29, 2021 or later into the custom offline media or ISO image before slipstreaming the LCU. See KB for details.  [Smart Card Failure] After installing this update, when connecting to devices in an untrusted domain using Remote Desktop, connections might fail to authenticate when using smart card authentication. You might receive the prompt, "Your credentials did not work. The credentials that were used to connect to [device name] did not work. Please enter new credentials." and "The login attempt failed" in red. Workaround: Requires use of Known Issue Rollback (KIR). See KB for details.  [Recovery Fail]

22. Copyright © 2022 Ivanti. All rights reserved. MS22-04-MR2K8-ESU: Monthly Rollup for Windows Server 2008  Maximum Severity: Critical  Affected Products: Microsoft Windows Server 2008 and IE 9  Description: This security update includes improvements and fixes that were a part of update KB 5011534 (released March 8, 2022). Addresses a memory leak that was introduced by the PacRequestorEnforcement registry key, a logging error during password changes, an issue in which domain joins may fail, and an issue that prevents you from changing a password that has expired. Bulletin is based on KB 5012658.  Impact: Remote Code Execution, Denial of Service, Elevation of Privilege and Information Disclosure  Fixes 45 Vulnerabilities: CVE-2022-24521 is known exploited and CVE-2022- 26904 is publicly disclosed. See the Security Update Guide for the complete list of CVEs.  Restart Required: Requires restart  Known Issues: See next slide.

23. Copyright © 2022 Ivanti. All rights reserved. April Known Issues for Server 2008  KB 5012658 – Windows Server 2008 (Monthly Rollup)  [File Rename] Certain operations, such as rename, that you perform on files or folders that are on a Cluster Shared Volume (CSV) may fail with the error, “STATUS_BAD_IMPERSONATION_LEVEL (0xC00000A5)”. This occurs when you perform the operation on a CSV owner node from a process that doesn’t have administrator privilege. Workaround: Perform the operation from a process that has administrator privilege or perform the operation from a node that doesn’t have CSV ownership. Microsoft is working on a resolution.  KB 5012632 – Windows Server 2008 (Security-only Update)  [File Rename]

24. Copyright © 2022 Ivanti. All rights reserved. MS22-04-SO2K8-ESU: Security-only Update for Windows Server 2008  Maximum Severity: Critical  Affected Products: Microsoft Windows Server 2008  Description: Addresses a memory leak that was introduced by the PacRequestorEnforcement registry key, a logging error during password changes, and an issue in which domain joins may fail. Bulletin is based on KB 5012632.  Impact: Remote Code Execution, Denial of Service, Elevation of Privilege and Information Disclosure  Fixes 45 Vulnerabilities: CVE-2022-24521 is known exploited and CVE-2022- 26904 is publicly disclosed. See the Security Update Guide for the complete list of CVEs.  Restart Required: Requires restart  Known Issues: See previous slide.

25. Copyright © 2022 Ivanti. All rights reserved. MS22-04-MR7-ESU: Monthly Rollup for Win 7 MS22-04-MR2K8R2-ESU Monthly Rollup for Server 2008 R2  Maximum Severity: Critical  Affected Products: Microsoft Windows 7, Server 2008 R2, and IE 11  Description: This security update includes improvements and fixes that were a part of update KB 5011552 (released March 8, 2022). Addresses a Windows Media Center configuration issue, a memory leak that was introduced by the PacRequestorEnforcement registry key, a logging error during password changes, an issue in which domain joins may fail, a service principal name (SPN) alias write issue and an issue that prevents you from changing a password that has expired. Bulletin is based on KB 5012626.  Impact: Remote Code Execution, Denial of Service, Elevation of Privilege and Information Disclosure  Fixes 51 Vulnerabilities: CVE-2022-24521 is known exploited and CVE-2022-26904 is publicly disclosed. See the Security Update Guide for the complete list of CVEs.  Restart Required: Requires restart  Known Issues: [File Rename]

26. Copyright © 2022 Ivanti. All rights reserved. MS22-04-SO7-ESU: Security-only Update for Win 7 MS22-04-SO2K8R2-ESU: Security-only Update for Server 2008 R2  Maximum Severity: Critical  Affected Products: Microsoft Windows 7 and Server 2008 R2  Description: Addresses a Windows Media Center configuration issue, a memory leak that was introduced by the PacRequestorEnforcement registry key, a logging error during password changes, an issue in which domain joins may fail, and a service principal name (SPN) alias write issue. Bulletin is based on KB 5012649.  Impact: Remote Code Execution, Denial of Service, Elevation of Privilege and Information Disclosure  Fixes 51 Vulnerabilities: CVE-2022-24521 is known exploited and CVE-2022-26904 is publicly disclosed. See the Security Update Guide for the complete list of CVEs.  Restart Required: Requires restart  Known Issues: [File Rename]

27. Copyright © 2022 Ivanti. All rights reserved. MS22-04-MR8: Monthly Rollup for Server 2012  Maximum Severity: Critical  Affected Products: Microsoft Windows Server 2012 and IE  Description: This security update includes improvements and fixes that were a part of update KB 5011535 (released previous March 8, 2022). Addresses a Windows Media Center configuration issue, a memory leak that was introduced by the PacRequestorEnforcement registry key, a logging error during password changes, an issue in which domain joins may fail, a service principal name (SPN) alias write issue and an issue that prevents you from changing a password that has expired. Bulletin is based on KB 5012650.  Impact: Remote Code Execution, Denial of Service, Elevation of Privilege and Information Disclosure  Fixes 59 Vulnerabilities: CVE-2022-24521 is known exploited and CVE-2022-26904 is publicly disclosed. See the Security Update Guide for the complete list of CVEs.  Restart Required: Requires restart  Known Issues: [File Rename] and [AD Forest Trust]

28. Copyright © 2022 Ivanti. All rights reserved. MS22-04-SO8: Security-only Update for Windows Server 2012  Maximum Severity: Critical  Affected Products: Microsoft Windows Server 2012  Description: Addresses a Windows Media Center configuration issue, a memory leak that was introduced by the PacRequestorEnforcement registry key, a logging error during password changes, an issue in which domain joins may fail, and a service principal name (SPN) alias write issue. Bulletin is based on KB 5012666.  Impact: Remote Code Execution, Denial of Service, Elevation of Privilege and Information Disclosure  Fixes 59 Vulnerabilities: CVE-2022-24521 is known exploited and CVE-2022- 26904 is publicly disclosed. See the Security Update Guide for the complete list of CVEs.  Restart Required: Requires restart  Known Issues: [File Rename] and [AD Forest Trust]

29. Copyright © 2022 Ivanti. All rights reserved. MS22-04-MR81: Monthly Rollup for Win 8.1 and Server 2012 R2  Maximum Severity: Critical  Affected Products: Microsoft Windows 8.1, Server 2012 R2, and IE  Description: This security update includes improvements and fixes that were a part of update KB 5011564 (released March 8, 2022) Addresses a Windows Media Center configuration issue, a memory leak that was introduced by the PacRequestorEnforcement registry key, a logging error during password changes, an issue in which domain joins may fail, a service principal name (SPN) alias write issue and an issue that prevents you from changing a password that has expired and an issue in which Windows might go into BitLocker recovery. Bulletin is based on KB 5012670.  Impact: Remote Code Execution, Denial of Service, Elevation of Privilege and Information Disclosure  Fixes 65 Vulnerabilities: CVE-2022-24521 is known exploited and CVE-2022-26904 is publicly disclosed. See the Security Update Guide for the complete list of CVEs.  Restart Required: Requires restart  Known Issues: [File Rename] and [AD Forest Trust]

30. Copyright © 2022 Ivanti. All rights reserved. MS22-04-SO81: Security-only Update for Win 8.1 and Server 2012 R2  Maximum Severity: Critical  Affected Products: Microsoft Windows 8.1, Server 2012 R2  Description: Addresses a Windows Media Center configuration issue, a memory leak that was introduced by the PacRequestorEnforcement registry key, a logging error during password changes, and an issue in which domain joins may fail. Bulletin is based on KB 5012639.  Impact: Remote Code Execution, Denial of Service, Elevation of Privilege and Information Disclosure  Fixes 65 Vulnerabilities: CVE-2022-24521 is known exploited and CVE-2022-26904 is publicly disclosed. See the Security Update Guide for the complete list of CVEs.  Restart Required: Requires restart  Known Issues: [File Rename] and [AD Forest Trust]

31. Copyright © 2022 Ivanti. All rights reserved. MS22-04-OFF: Security Updates for Microsoft Office  Maximum Severity: Important  Affected Products: Excel 2013 and 2016, Office 2013 and 2016, Office 2019 & LTSC 2021 for macOS, Office Online Server, Lync Server 2013, and Skype Server for Business 2015 & 2019  Description: This security update resolves multiple vulnerabilities in Microsoft Office applications. Consult the Security Update Guide for specific details on each. This bulletin references just the release notes for the macOS Office.  Impact: Remote Code Execution, Spoofing, and Information Disclosure  Fixes 4 Vulnerabilities: No vulnerabilities are publicly disclosed or known exploited. CVE-2022-24473, CVE-2022-26901, CVE-2022-26910 and CVE-2022- 26911 are fixed in this release.  Restart Required: Requires application restart  Known Issues: None reported

32. Copyright © 2022 Ivanti. All rights reserved. MS22-04-O365: Security Updates Microsoft 365 Apps, Office 2019 and Office LTSC 2021  Maximum Severity: Important  Affected Products: Microsoft 365 Apps, Office 2019, Office LTSC 2021  Description: This month’s update resolved various bugs and performance issues in Office applications. Information on the security updates is available at https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates.  Impact: Remote Code Execution  Fixes 2 Vulnerabilities: No vulnerabilities are publicly disclosed or known exploited. CVE-2022-24473 and CVE-2022-26901 are fixed in this release.  Restart Required: Requires application restart  Known Issues: None reported

33. Copyright © 2022 Ivanti. All rights reserved. MS22-04-SPT: Security Updates for SharePoint Server  Maximum Severity: Important  Affected Products: Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Foundation Server 2013, SharePoint Enterprise Server 2016, and SharePoint Server 2019  Description: This update contains an extensive list of security, performance, and bug fixes. Review the KB articles for details. This bulletin is based on 4 KB articles.  Impact: Remote Code Execution and Spoofing  Fixes 2 Vulnerabilities: No vulnerabilities are publicly disclosed or known exploited. CVE-2022-24472 and CVE-2022-26901 are fixed in this release.  Restart Required: Requires restart  Known Issues: See next slide

34. Copyright © 2022 Ivanti. All rights reserved. April Known Issues for SharePoint Server  KB 5002191 – SharePoint Server Subscription Edition  [Home Page] Modern home page (or any site pages) cannot render well in Internet Explorer browser and on modern home page (or any site pages), you cannot do the "open the detail pane" action in the List web part and Document Library web part. Workaround: Access the corresponding list or document page to do the similar operation.

35. Copyright © 2022 Ivanti. All rights reserved. MS22-04-MRNET: Monthly Rollup for Microsoft .NET  Maximum Severity: Important  Affected Products: Microsoft Windows .Net Framework 2.0 through 4.8  Description: This update addresses an issue where an unauthenticated attacker could cause a denial of service on an affected system. Additional quality and reliability updates are included as well. This bulletin references 14 KB articles.  Impact: Denial of Service  Fixes 1 Vulnerability: CVE-2022-26832 is not publicly disclosed or known exploited.  Restart Required: Does not require a system restart after you apply it unless files that are being updated are locked or are being used.  Known Issues: None reported

36. Copyright © 2022 Ivanti. All rights reserved. MS22-04-SONET: Security-only Update for Microsoft .NET  Maximum Severity: Important  Affected Products: Microsoft Windows .Net Framework 2.0 through 4.8  Description: This update addresses an issue where an unauthenticated attacker could cause a denial of service on an affected system. Additional quality and reliability updates are included as well. This bulletin references 14 KB articles.  Impact: Denial of Service  Fixes 1 Vulnerability: CVE-2022-26832 is not publicly disclosed or known exploited.  Restart Required: Does not require a system restart after you apply it unless files that are being updated are locked or are being used.  Known Issues: None reported

37. Between Patch Tuesdays

38. Copyright © 2022 Ivanti. All rights reserved. Release Summary  Security Updates (with CVEs): Apache Tomcat (3), Apple iTunes (1), Google Chrome (4), Amazon Corretto (1), Docker for Windows (2), Firefox (1), Firefox ESR (1), Node.JS (4), Snagit (1), Thunderbird (1)  Security (w/o CVEs): Adobe Acrobat DC and Acrobat Reader (1), Adobe Acrobat and Acrobat Reader (2), Box Edit (2), Camtasia (1), Google Chrome (1), Falcon Sensor for Windows (3), Citrix Workspace App (3), Docker for Windows Stable (1), Dropbox (2), Evernote (3), Firefox (2), Firefox ESR (1), FileZilla Client (1), GoodSync (5), Google Earth Pro (1), IrfanView (1), Jabra Direct (1), LibreOffice (2), Malwarebytes (2), Node.JS (Current) (4), Node.JS (LTS Upper) (1), Node.JS (Maintain) (1), Notepad++ (1), Opera (5), Paint.net (2), Plantronics Hub (1), Plex Media Server (3), Skype (1), Slack Machine-Wide Installer (2), Splunk Universal Forwarder (1), Sourcetree for Windows Enterprise (1), Tableau Desktop (5), Tableau Prep Builder (1), Tableau Reader (1), Apache Tomcat (3), TortoiseSVN (1), TeamViewer (4), UltraVNC (2), VMware Horizon Client (3), VMware Workstation Player (1), VMware Workstation Pro (1), Wireshark (2), WinRAR (1), Zoom Client (3), Zoom Outlook Plugin (1), Zoom VDI (1)  Non-Security Updates: AIMP (2), Apple Mobile Device Support (1), Beyond Compare (1), BlueJeans Outlook Addin (1), Cisco WebEx Teams (1), Google Drive File Stream (1), GeoGebra Classic (3), BlueJeans (2), NextCloud Desktop Client (1), PDF-Xchange PRO (1), Plantronics Hub (1), Python (4), R for Windows (1), RingCentral App (Machine-Wide Installer) (1), Rocket.Chat Desktop Client (4), RealVNC Server (2), RealVNC Viewer (2), TortoiseHG (1)

39. Copyright © 2022 Ivanti. All rights reserved. Third Party CVE Information  Apple iTunes 12.12.3.5  AI-220309, QAI121235  Fixes 4 Vulnerabilities: CVE-2022-22611, CVE-2022-22662, CVE-2022-22612, CVE-2022- 22629  Apache Tomcat 10.0.20.0, 9.0.62.0, 8.5.78.0  Date: 220401, Multiple Qcodes  Fixes 1 Vulnerability: CVE-2022-22965  Docker for Windows Stable 4.6.0.0  DOCKER-220315, QDOCKER4600  Fixes 1 Vulnerability: CVE-2022-0847  Docker for Windows Stable 4.7.0.0  DOCKER-220407, QDOCKER4700  Fixes 1 Vulnerability: CVE-2022-24769

40. Copyright © 2022 Ivanti. All rights reserved. Third Party CVE Information (cont)  Google Chrome 99.0.4844.74  CHROME-220315, QGC990484474  Fixes 10 Vulnerabilities: CVE-2022-0971, CVE-2022-0973, CVE-2022-0979, CVE-2022- 0974, CVE-2022-0972, CVE-2022-0980, CVE-2022-0975, CVE-2022-0976, CVE-2022- 0977, CVE-2022-0978  Google Chrome 99.0.4844.84  CHROME-220325, QGC990484484  Fixes 1 Vulnerability: CVE-2022-1096  Google Chrome 100.0.4896.60  CHROME-220329, QGC1000489660  Fixes 20 Vulnerabilities: CVE-2022-1130, CVE-2022-1128, CVE-2022-1125, CVE-2022- 1129, CVE-2022-1131, CVE-2022-1138, CVE-2022-1127, CVE-2022-1133, CVE-2022-1132, CVE-2022-1143, CVE-2022-1135, CVE-2022-1134, CVE-2022-1139, CVE-2022-1144, CVE- 2022-1136, CVE-2022-1141, CVE-2022-1145, CVE-2022-1137, CVE-2022-1146, CVE- 2022-1142

41. Copyright © 2022 Ivanti. All rights reserved. Third Party CVE Information (cont)  Google Chrome 100.0.4896.75  CHROME-220325, QGC1000489675  Fixes 1 Vulnerability: CVE-2022-1232  Snagit 2021.4.5  SNAG21-220315, QSNAG2145  Fixes 1 Vulnerability: CVE-2018-1285  Amazon Corretto 8 Update 322  CORRETTO8-322, QCRTOJRE8322  Fixes 13 Vulnerabilities: CVE-2022-21305, CVE-2022-21283, CVE-2022-21282, CVE- 2022-21248, CVE-2022-21294, CVE-2022-21293, CVE-2022-21296, CVE-2022- 21340, CVE-2022-21360, CVE-2022-21299, CVE-2022-21341, CVE-2022-21349, CVE-2022-21365

42. Copyright © 2022 Ivanti. All rights reserved. Third Party CVE Information (cont)  Firefox 99.0  FF-220405, QFF99  Fixes 11 Vulnerabilities: CVE-2022-28283, CVE-2022-28282, CVE-2022-28288, CVE-2022- 1097, CVE-2022-28289, CVE-2022-28284, CVE-2022-24713, CVE-2022-28286, CVE- 2022-28281, CVE-2022-28285, CVE-2022-28287  Firefox ESR 91.8.0  FFE-220405, QFFE9180  Fixes 8 Vulnerabilities: CVE-2022-24713, CVE-2022-28282, CVE-2022-28289, CVE-2022- 1097, CVE-2022-28281, CVE-2022-1196, CVE-2022-28285, CVE-2022-28286  Thunderbird 91.8.0  TB-220405, QTB9180  Fixes 9 Vulnerabilities: CVE-2022-1197, CVE-2022-28289, CVE-2022-1097, CVE-2022- 1196, CVE-2022-28282, CVE-2022-24713, CVE-2022-28286, CVE-2022-28281, CVE- 2022-28285

43. Copyright © 2022 Ivanti. All rights reserved. Third Party CVE Information (cont)  Node.JS 17.7.2 (Current)  NOJSC-220318, QNODEJSC1772  Node.JS 14.19.1 (LTS Lower)  NOJSLL-220318, QNODEJSL14191  Node.JS 16.14.2 (LTS Upper)  NOJSLU-220318, QNODEJSLU16142  Node.JS 12.22.11 (Maintain)  NOJSM-220318, QNODEJSLU122211  Fixes 1 Vulnerability in each: CVE-2022-0778

44. Q & A

2022 FR April Patch Tuesday

Esté a ler uma amostra.

Confira estes a seguir

2022 FR April Patch Tuesday

Mais Conteúdo rRelacionado

Semelhante a 2022 FR April Patch Tuesday (20)

Mais de Ivanti (13)

Mais recentes (20)

2022 FR April Patch Tuesday