Microsoft credited four different companies for CVE-2022-36969’s discovery. “The CLFS Driver is a general-purpose logging subsystem first introduced in Windows 2003 R2 Operating system that has become highly important and has shipped with all later versions,” Jogi told Spiceworks. Jordan Schroeder, managing CISO at Barrier Networks, told Spiceworks, “This is a relatively small update in comparison to last month’s 141 fixes, but it does address two zero-days, one of which is being exploited in the wild, so organizations must prioritize applying these fixes.” Patches for zero-day vulnerabilities in the September Patch Tuesdayįirst up is CVE-2022-37969, an elevation of privilege flaw in the Common Log File System (CLFS).

Microsoft also addressed two zero-day vulnerabilities, i.e., those actively targeted through a publicly available exploit. Of the 64 fixes released on September Patch Tuesday, five are for critical vulnerabilities, 57 for important-rated vulnerabilities, and one each for moderate and low severity bugs. However, this month hit a sizable milestone for the calendar year, with MSFT having fixed the 1000th CVE of 2022 – likely on track to surpass 2021, which patched 1,200 CVEs in total,” noted Bharat Jogi, director of vulnerability and threat research at Qualys.

“In terms of CVEs released, this Patch Tuesday may appear on the lighter side in comparison to other months. With fixes to 64 vulnerabilities, the September patchload is in line with last year and is the smallest of all months in 2022.

Yesterday, Microsoft released a significantly smaller patchload, almost half of the total from August, as part of its September Patch Tuesday.

What is google chrome elevation service