Security News > 2022 > March > Microsoft Addresses 3 Zero-Days & 3 Critical Bugs for March Patch Tuesday

Microsoft has addressed 71 security vulnerabilities in its scheduled March Patch Tuesday update - only three of which are rated critical in severity.

Three of the bugs are listed as publicly known zero-days, but none of them are listed as having been exploited in the wild.

It's worth noting that the update marks the second month in a row with a surprisingly low number of critical patches; in fact, February's Patch Tuesday update didn't list any.

"It's unclear if this low percentage of bugs is just a coincidence, or if Microsoft might be evaluating the severity using different calculus than in the past."

Breen pointed out that the bug is one of three RCE bugs affecting RDP included in the advisory; the other two are CVE-2022-23285 and CVE-2022-24503.

Microsoft offered no technical details about the third publicly known bug.

News URL

https://threatpost.com/microsoft-zero-days-critical-bugsmarch-patch-tuesday/178817/