Patch Tuesday, January 2022
Microsoft's monthly security release, Tuesday, January 11, 2022. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
2 CVEs · 0 critical · 2 exploited · 1 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
2 CVEs · 0 critical · 2 exploited · 1 with public exploit code
- 7.0HighJan 11, 2022Microsoft Win32k Memory corruptionCVE-2022-21882Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.Exploited59% likelyExploit codeMetasploit
- 7.0HighJan 11, 2022Microsoft Windows Privilege escalationCVE-2022-21919Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.Exploited2.4% likelyDetection
Adobe
No tracked Adobe CVEs in this window.
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.