Security News > 2022 > August > Patch Tuesday: Yet another Microsoft RCE bug under active exploit

Of the 121 Microsoft bugs, 17 are considered critical.

First, CVE-2022-34713, a remote code execution vulnerability in Microsoft Windows Support Diagnostic Tool that's under active attack.

To exploit this bug, an attacker would need to trick a victim into opening a specially crafted file, likely either via a phishing email or malicious website that contains a file designed to exploit the vulnerability.

Yes, this issue of MSDT bugs under active exploit has been an ongoing issue for the software giant.

The second Microsoft vulnerability listed as publicly known, tracked as CVE-2022-30134, is an information disclosure bug in Microsoft Exchange.

VMware issued three new security updates today and warned that a critical authentication bypass bug disclosed last week has since been exploited in the wild.

News URL

https://go.theregister.com/feed/www.theregister.com/2022/08/09/august_patch_tuesday_microsoft/