Patch Tuesday, February 2012
Microsoft's monthly security release, Tuesday, February 14, 2012. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
0 CVEs · 0 critical · 0 exploited · 0 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
No tracked Microsoft CVEs in this window. Vendors sometimes publish a day or two later.
Adobe
2 CVEs · 0 critical · 2 exploited · 1 with public exploit code
- 7.8HighFeb 16, 2012Adobe Flash Player Memory corruptionCVE-2012-0754Adobe Flash Player contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).Exploited91% likelyExploit codeExploit-DB · Metasploit
- 6.1MediumFeb 16, 2012Adobe Flash Player XSSCVE-2012-0767Adobe Flash Player contains a XSS vulnerability that allows remote attackers to inject web script or HTML.Exploited6.2% likely
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.