信息安全

信息安全

CNNVD | 关于微软多个安全漏洞的通报

发布时间：2022-04-15文章来源： 浏览次数：

近日，微软官方发布了多个安全漏洞的公告，其中微软产品本身漏洞109个，影响到微软产品的其他厂商漏洞2个。包括Microsoft Windows Network File System 代码注入漏洞（CNNVD-202204-3112、CVE-2022-24491）、Microsoft Windows Remote Procedure Call Runtime 代码注入漏洞（CNNVD-202204-3019、CVE-2022-26809）等多个漏洞。成功利用上述漏洞的攻击者可以在目标系统上执行任意代码、获取用户数据，提升权限等。微软多个产品和系统受漏洞影响。目前，微软官方已经发布了漏洞修复补丁，建议用户及时确认是否受到漏洞影响，尽快采取修补措施。

一、 漏洞介绍

2022年4月13日，微软发布了2022年4月份安全更新，共111个漏洞的补丁程序，CNNVD对这些漏洞进行了收录。本次更新主要涵盖了Microsoft Windows组件、Microsoft Windows SMB Server、MicrosoftWindows App Store、Microsoft .NET等。CNNVD对其危害等级进行了评价，其中超危漏洞2个，高危漏洞60个，中危漏洞49个。微软多个产品和系统版本受漏洞影响，具体影响范围可访问https://portal.msrc.microsoft.com/zh-cn/security-guidance查询。

二、漏洞详情

此次更新共包括108个新增漏洞的补丁程序，其中超危漏洞2个，高危漏洞59个，中危漏洞47个。

序号 漏洞名称 CNNVD编号 CVE编号 危害等级 官方链接
1 Microsoft Windows Network File System 代码注入漏洞 CNNVD-202204-3112 CVE-2022-24491 超危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24491
2 Microsoft Windows Remote Procedure Call Runtime 代码注入漏洞 CNNVD-202204-3019 CVE-2022-26809 超危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26809
3 Microsoft Dynamics 输入验证错误漏洞 CNNVD-202204-3184 CVE-2022-23259 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23259
4 Microsoft Office 代码注入漏洞 CNNVD-202204-3104 CVE-2022-24473 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24473
5 Microsoft Win32K 权限许可和访问控制问题漏洞 CNNVD-202204-3107 CVE-2022-24474 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24474
6 Microsoft Windows Common Log File System Driver 权限许可和访问控制问题漏洞 CNNVD-202204-3200 CVE-2022-24481 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24481
7 Microsoft Windows SMB Server 代码注入漏洞 CNNVD-202204-3109 CVE-2022-24485 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24485
8 Microsoft Kerberos for Windows 权限许可和访问控制问题漏洞 CNNVD-202204-3201 CVE-2022-24486 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24486
9 Microsoft Windows Local Security Authority  Subsystem Service 输入验证错误漏洞 CNNVD-202204-3196 CVE-2022-24487 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24487
10 Microsoft Windows 权限许可和访问控制问题漏洞 CNNVD-202204-3189 CVE-2022-24489 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24489
11 Microsoft Hyper-V 信息泄露漏洞 CNNVD-202204-3119 CVE-2022-24490 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24490
12 Microsoft Windows Remote Procedure Call Runtime 代码注入漏洞 CNNVD-202204-3113 CVE-2022-24492 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24492
13 Microsoft Windows Local Security Authority  Subsystem Service 权限许可和访问控制问题漏洞 CNNVD-202204-3136 CVE-2022-24496 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24496
14 Microsoft Windows SMB Server 输入验证错误漏洞 CNNVD-202204-3116 CVE-2022-24500 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24500
15 Microsoft Windows Remote Procedure Call Runtime 代码注入漏洞 CNNVD-202204-3110 CVE-2022-24528 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24528
16 Microsoft Windows Codecs Library 输入验证错误漏洞 CNNVD-202204-3186 CVE-2022-24532 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24532
17 Microsoft Windows rdp 代码注入漏洞 CNNVD-202204-3100 CVE-2022-24533 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24533
18 Microsoft Windows SMB Server 安全漏洞 CNNVD-202204-3099 CVE-2022-24534 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24534
19 Microsoft DNS Server 代码注入漏洞 CNNVD-202204-3098 CVE-2022-24536 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24536
20 Microsoft Hyper-V 安全漏洞 CNNVD-202204-3097 CVE-2022-24537 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24537
21 Microsoft Hyper-V 信息泄露漏洞 CNNVD-202204-3095 CVE-2022-24539 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24539
22 Microsoft Windows ALPC 竞争条件问题漏洞 CNNVD-202204-3088 CVE-2022-24540 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24540
23 Microsoft Windows SMB Server 输入验证错误漏洞 CNNVD-202204-3087 CVE-2022-24541 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24541
24 Microsoft Windows 输入验证错误漏洞 CNNVD-202204-3126 CVE-2022-24543 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24543
25 Microsoft Kerberos for Windows 权限许可和访问控制问题漏洞 CNNVD-202204-3085 CVE-2022-24544 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24544
26 Microsoft Windows输入验证错误漏洞 CNNVD-202204-3084 CVE-2022-24545 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24545
27 Microsoft Windows AppX Deployment Extensions权限许可和访问控制问题漏洞 CNNVD-202204-3072 CVE-2022-24549 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24549
28 Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞 CNNVD-202204-3054 CVE-2022-26789 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26789
29 Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞 CNNVD-202204-3050 CVE-2022-26790 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26790
30 Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞 CNNVD-202204-3052 CVE-2022-26791 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26791
31 Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞 CNNVD-202204-3045 CVE-2022-26792 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26792
32 Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞 CNNVD-202204-3042 CVE-2022-26795 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26795
33 Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞 CNNVD-202204-3041 CVE-2022-26796 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26796
34 Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞 CNNVD-202204-3033 CVE-2022-26797 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26797
35 Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞 CNNVD-202204-3032 CVE-2022-26798 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26798
36 Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞 CNNVD-202204-3031 CVE-2022-26801 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26801
37 Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞 CNNVD-202204-3030 CVE-2022-26802 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26802
38 Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞 CNNVD-202204-3029 CVE-2022-26803 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26803
39 Microsoft Windows Work Folder Service 竞争条件问题漏洞 CNNVD-202204-3021 CVE-2022-26807 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26807
40 Microsoft Windows File Explorer 权限许可和访问控制问题漏洞 CNNVD-202204-3020 CVE-2022-26808 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26808
41 Microsoft Windows File Explorer权限许可和访问控制问题漏洞 CNNVD-202204-3018 CVE-2022-26810 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26810
42 Microsoft DNS Server 代码注入漏洞 CNNVD-202204-3017 CVE-2022-26811 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26811
43 Microsoft DNS Server 代码注入漏洞 CNNVD-202204-3015 CVE-2022-26812 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26812
44 Microsoft DNS Server 代码注入漏洞 CNNVD-202204-3006 CVE-2022-26813 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26813
45 Microsoft DNS Server 代码注入漏洞 CNNVD-202204-3004 CVE-2022-26815 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26815
46 Microsoft DNS Server 代码注入漏洞 CNNVD-202204-2989 CVE-2022-26823 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26823
47 Microsoft DNS Server 代码注入漏洞 CNNVD-202204-2986 CVE-2022-26824 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26824
48 Microsoft Windows SMB Server 输入验证错误漏洞 CNNVD-202204-3055 CVE-2022-26830 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26830
49 Microsoft Lightweight Directory Access Protocol 输入验证错误漏洞 CNNVD-202204-2965 CVE-2022-26831 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26831
50 Microsoft .NET Framework输入验证错误漏洞 CNNVD-202204-3008 CVE-2022-26832 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26832
51 Microsoft Azure Site Recovery 输入验证错误漏洞 CNNVD-202204-3220 CVE-2022-26898 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26898
52 Microsoft Office 代码注入漏洞 CNNVD-202204-3106 CVE-2022-26901 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26901
53 Microsoft Graphics Components 输入验证错误漏洞 CNNVD-202204-3066 CVE-2022-26903 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26903
54 Microsoft Windows 竞争条件问题漏洞 CNNVD-202204-2936 CVE-2022-26904 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26904
55 Microsoft Windows 输入验证错误漏洞 CNNVD-202204-2953 CVE-2022-26915 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26915
56 Microsoft Windows Fax services 输入验证错误漏洞 CNNVD-202204-2948 CVE-2022-26916 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26916
57 Microsoft Windows Fax services输入验证错误漏洞 CNNVD-202204-2949 CVE-2022-26917 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26917
58 Microsoft Windows Fax services输入验证错误漏洞 CNNVD-202204-2950 CVE-2022-26918 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26918
59 Microsoft Lightweight Directory Access Protocol 输入验证错误漏洞 CNNVD-202204-2946 CVE-2022-26919 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26919
60 Microsoft Visual Studio 安全漏洞 CNNVD-202204-3290 CVE-2022-26921 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26921
61 Microsoft YARP reverse proxy 安全漏洞 CNNVD-202204-3292 CVE-2022-26924 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26924
62 Microsoft Office 安全漏洞 CNNVD-202204-3194 CVE-2022-24472 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24472
63 Microsoft Windows Feedback Hub 权限许可和访问控制问题漏洞 CNNVD-202204-3198 CVE-2022-24479 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24479
64 Microsoft Windows Kernel 信息泄露漏洞 CNNVD-202204-3188 CVE-2022-24483 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24483
65 Microsoft Windows 输入验证错误漏洞 CNNVD-202204-3108 CVE-2022-24484 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24484
66 Microsoft Windows App Store 权限许可和访问控制问题漏洞 CNNVD-202204-3192 CVE-2022-24488 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24488
67 Microsoft Local Security Authority Server 信息泄露漏洞 CNNVD-202204-3130 CVE-2022-24493 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24493
68 Microsoft Windows Ancillary Function Driver for  WinSock 权限许可和访问控制问题漏洞 CNNVD-202204-3128 CVE-2022-24494 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24494
69 Microsoft Windows Media Foundation 输入验证错误漏洞 CNNVD-202204-3123 CVE-2022-24495 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24495
70 Microsoft Windows 信息泄露漏洞 CNNVD-202204-3121 CVE-2022-24498 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24498
71 Microsoft Windows Installer 权限许可和访问控制问题漏洞 CNNVD-202204-3117 CVE-2022-24499 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24499
72 Microsoft Windows 权限许可和访问控制问题漏洞 CNNVD-202204-3114 CVE-2022-24527 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24527
73 Microsoft Windows Installer 权限许可和访问控制问题漏洞 CNNVD-202204-3105 CVE-2022-24530 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24530
74 Microsoft Windows Cluster Shared Volume 输入验证错误漏洞 CNNVD-202204-3096 CVE-2022-24538 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24538
75 Microsoft Win32K 权限许可和访问控制问题漏洞 CNNVD-202204-3086 CVE-2022-24542 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24542
76 Microsoft DWM Core Library 权限许可和访问控制问题漏洞 CNNVD-202204-3083 CVE-2022-24546 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24546
77 Microsoft Windows 权限许可和访问控制问题漏洞 CNNVD-202204-3073 CVE-2022-24547 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24547
78 Microsoft Windows Defender 输入验证错误漏洞 CNNVD-202204-3203 CVE-2022-24548 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24548
79 Microsoft Windows权限许可和访问控制问题漏洞 CNNVD-202204-3071 CVE-2022-24550 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24550
80 Git for Windows 代码问题漏洞 CNNVD-202204-3058 CVE-2022-24767 中危 https://github.com/git-for-windows/git/security/advisories/GHSA-gf48-x3vr-j5c3
81 Microsoft Hyper-V信息泄露漏洞 CNNVD-202204-3070 CVE-2022-26783 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26783
82 Microsoft Windows Cluster Shared Volume输入验证错误漏洞 CNNVD-202204-3069 CVE-2022-26784 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26784
83 Microsoft Hyper-V 信息泄露漏洞 CNNVD-202204-3068 CVE-2022-26785 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26785
84 Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞 CNNVD-202204-3053 CVE-2022-26786 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26786
85 Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞 CNNVD-202204-3067 CVE-2022-26787 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26787
86 Microsoft PowerShell Utility 权限许可和访问控制问题漏洞 CNNVD-202204-3062 CVE-2022-26788 中危 https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-26788
87 Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞 CNNVD-202204-3044 CVE-2022-26793 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26793
88 Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞 CNNVD-202204-3043 CVE-2022-26794 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26794
89 Microsoft Windows Active Directory 代码注入漏洞 CNNVD-202204-3005 CVE-2022-26814 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26814
90 Microsoft DNS Server 信息泄露漏洞 CNNVD-202204-3007 CVE-2022-26816 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26816
91 Microsoft Windows Active Directory 代码注入漏洞 CNNVD-202204-3002 CVE-2022-26817 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26817
92 Microsoft DNS Server 代码注入漏洞 CNNVD-202204-3003 CVE-2022-26818 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26818
93 Microsoft DNS Server 代码注入漏洞 CNNVD-202204-2992 CVE-2022-26819 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26819
94 Microsoft DNS Server 代码注入漏洞 CNNVD-202204-2991 CVE-2022-26820 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26820
95 Microsoft DNS Server 代码注入漏洞 CNNVD-202204-2990 CVE-2022-26821 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26821
96 Microsoft DNS Server 代码注入漏洞 CNNVD-202204-2988 CVE-2022-26822 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26822
97 Microsoft DNS Server代码注入漏洞 CNNVD-202204-2971 CVE-2022-26825 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26825
98 Microsoft DNS Server 代码注入漏洞 CNNVD-202204-2972 CVE-2022-26826 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26826
99 Microsoft Windows File Server 竞争条件问题漏洞 CNNVD-202204-2970 CVE-2022-26827 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26827
100 Microsoft Bluetooth Driver 竞争条件问题漏洞 CNNVD-202204-2969 CVE-2022-26828 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26828
101 Microsoft DNS Server代码注入漏洞 CNNVD-202204-2968 CVE-2022-26829 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26829
102 Microsoft Azure Site Recovery 信息泄露漏洞 CNNVD-202204-3222 CVE-2022-26896 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26896
103 Microsoft Azure Site Recovery 信息泄露漏洞 CNNVD-202204-3218 CVE-2022-26897 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26897
104 Microsoft Azure SDK 信息泄露漏洞 CNNVD-202204-3252 CVE-2022-26907 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26907
105 Microsoft Skype 安全漏洞 CNNVD-202204-3074 CVE-2022-26910 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26910
106 Microsoft Skype for Business Server 信息泄露漏洞 CNNVD-202204-3195 CVE-2022-26911 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26911
107 Microsoft Win32k 权限许可和访问控制问题漏洞 CNNVD-202204-2956 CVE-2022-26914 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26914
108 Microsoft Graphics Components 信息泄露漏洞 CNNVD-202204-2976 CVE-2022-26920 中危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26920

 

此次更新共包括1个更新漏洞的补丁程序，其中高危漏洞1个。

序号 漏洞名称 CNNVD编号 CVE编号 危害等级 官方链接
1 Microsoft Visual Studio 权限许可和访问控制问题漏洞 CNNVD-202112-1181 CVE-2021-43877 高危 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43877


此次更新共包括2个影响微软产品的其他厂商漏洞的补丁程序，其中中危漏洞2个。

序号 漏洞名称 CNNVD编号 CVE编号 危害等级 厂商 官方链接
1 Google brotli Library 缓冲区错误漏洞 CNNVD-202009-910 CVE-2020-8927 中危 Google https://github.com/google/brotli/releases/tag/v1.0
2 Git for Windows 代码问题漏洞 CNNVD-202204-2943 CVE-2022-24765 中危 个人开发者 https://github.com/git-for-windows/git/security/advisories/GHSA-vw2c-22j4-2fh2

三、修复建议

目前，微软官方已经发布补丁修复了上述漏洞，建议用户及时确认漏洞影响，尽快采取修补措施。微软官方补丁下载地址：

https://msrc.microsoft.com/update-guide/en-us
CNNVD将继续跟踪上述漏洞的相关情况，及时发布相关信息。如有需要，可与CNNVD联系。联系方式: cnnvdvul@itsec.gov.cn

（来源：CNNVD）

上一页：CNNVD | 关于Apache Struts2安全漏洞的通报 下一页：CNNVD | 关于Spring Cloud Function 安全漏洞的通报

地址：山东省烟台市蓬莱区仙境西路34号|  邮编：265600

综合科：0535-5952577|网络管理科：0535-3737888|信息管理科：0535-5777797

版权所有©1995-2013  烟台科技学院 鲁ICP备12001066号-12