You are currently viewing Microsoft’s March 22 Patch Tuesday Addresses 92 Security Vulnerabilities Including 3 Zero-days

Microsoft’s March 22 Patch Tuesday Addresses 92 Security Vulnerabilities Including 3 Zero-days

  • Post author:
  • Reading time:12 mins read

Microsoft has released March 2022 Patch Tuesday security updates with a total of 92 vulnerabilities, which include 3 Zero-Days, 3 CVEs rated as critical, and the rest as important. The Zero days are not known to be actively exploited in attacks, and all the 3 Critical vulnerabilities are Remote Code Execution. However, the products covered in March’s security updates include Windows Remote Desktop, Windows Codecs library, Microsoft Edge, Windows Kernel, etc. In fact, Microsoft Edge, with 21 CVEs, holds the highest number of vulnerabilities addressed this month with the help of vulnerability manager. It is essential to have an automated patch management software to remediate these kinds of vulnerabilities.

Zero-day Vulnerabilities in Microsoft March 2022 Patch Tuesday

These are the vulnerabilities uncovered during March 2022 Patch Tuesday

CVE-2022-21990 – Remote Desktop Client Remote Code Execution Vulnerability. Moreover, an attacker can perform the Remote Code Execution in the vulnerable remote desktop clients connected to the server in control of an attacker.

CVE-2022-24459 – Windows Fax and Scan Service Elevation of Privilege Vulnerability. However, the loosely imposed security restrictions in Windows Fax and Scan Service lead to security restrictions bypass and privilege escalation. In this case, successful exploitation allows a local user to escalate privileges on the system.

CVE-2022-24512 – .NET and Visual Studio Remote Code Execution Vulnerability. The vulnerability is caused due to improper input validation in .NET and Visual Studio, which leads to remote code execution.

A good vulnerability management tool can prevent these attacks from occuring.

Critical Vulnerabilities

CVE-2022-23277 – Microsoft Exchange Server Remote Code Execution. However, microsoft Exchange Server versions 2013, 2016, and 2019.. are vulnerable to a remote code execution.  said, “An authenticated attacker can attempt to trigger malicious code in the context of the server’s account through a network call”.

Microsoft security bulletin summary for March 2022

      • Windows Kernel

      • Microsoft Exchange Server

      • Windows Remote Desktop

      • Windows Media

      • Azure Site Recovery

      • Microsoft Office

      • Microsoft Windows

      • Visual Studio Code

      • Windows Security Support Provider Interface

      • Windows SMB Server

      • Windows HTML Platform

      • Windows Installer

    Products affected by Microsoft March 2022 Patch Tuesday:

    Product: Microsoft Windows


    Impact: Elevation of Privilege, Information Disclosure, Security Feature Bypass, Remote Code Execution and then Denial of Service
    KB’s : 50114915011487501149350114955011485501150350115645011560501155250115295011486
    Severity: Important

    Product: Azure Site Recovery VMWare to Azure
    Impact: Elevation of Privilege, Remote Code Execution.
    Severity: Important

    Product: Microsoft Visual Studio
    Impact: Remote Code Execution, Denial of Service
    Severity: Important

    Product: Microsoft Office
    Impact: Tampering, Security Feature Bypass, Remote Code Execution.
    Severity: Important

    However, SanerNow VMand SanerNow PM detect these vulnerabilities and automatically fix them by applying security updates. Finally, use SanerNow and keep your systems updated and secure.

    Share this article