Alert GCSA-22076 - Microsoft Security Update Luglio 2022
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
******************************************************************
Alert ID: GCSA-22076
Data: 13 Luglio 2022
Titolo: Microsoft Security Update Luglio 2022
******************************************************************
:: Descrizione del problema
Microsoft ha rilasciato il security update mensile per Luglio 2022,
questa versione risolve 84 vulnerabilita', delle quali una zero-day.
La CVE-2022-22047 risulta essere sfruttata attivamente in rete.
Maggiori dettagli sono disponibili alla sezione "Riferimenti".
:: Software interessato
AMD CPU Branch
Azure Site Recovery
Azure Storage Library
Microsoft Defender for Endpoint
Microsoft Edge (Chromium-based)
Microsoft Graphics Component
Microsoft Office
Open Source Software
Role: DNS Server
Role: Windows Fax Service
Role: Windows Hyper-V
Skype for Business and Microsoft Lync
Windows Active Directory
Windows Advanced Local Procedure Call
Windows BitLocker
Windows Boot Manager
Windows Client/Server Runtime Subsystem
Windows Connected Devices Platform Service
Windows Credential Guard
Windows Fast FAT Driver
Windows Fax and Scan Service
Windows Group Policy
Windows IIS
Windows Kernel
Windows Media
Windows Network File System
Windows Performance Counters
Windows Point-to-Point Tunneling Protocol
Windows Portable Device Enumerator Service
Windows Print Spooler Components
Windows Remote Procedure Call Runtime
Windows Security Account Manager
Windows Server Service
Windows Shell
Windows Storage
XBox
:: Impatto
Esecuzione remota di codice arbitrario (RCE)
Denial of Service (DoS)
Acquisizione di privilegi piu' elevati (EoP)
Information Disclosure (ID)
Bypass restrizioni di sicurezza
Tampering
:: Soluzioni
Per default l'installazione degli aggiornamenti
avviene in maniera automatica.
Per installare manualmente scegliere
Start > Impostazioni > Aggiornamento e Sicurezza > Windows Update
Verificare di aver installato la versione piu' recente del
Servicing Stack Updates
https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001
https://docs.microsoft.com/it-it/windows/deployment/update/servicing-stack-updates
Windows Update domande frequenti
https://support.microsoft.com/en-us/help/12373/windows-update-faq
Gli aggiornamenti sono disponibili anche tramite il catalogo di Microsoft Update
https://www.catalog.update.microsoft.com/
Gli utenti che utilizzano ancora Windows 7, Windows Server 2008 o 2008 R2
devono acquistare l'Extended Security Update per continuare a ricevere gli aggiornamenti
https://support.microsoft.com/en-hk/help/4522133/procedure-to-continue-receiving-security-updates
:: Riferimenti
Microsoft Security Updates - Release Notes
https://msrc.microsoft.com/update-guide/releaseNote/2022-Jul
https://msrc-blog.microsoft.com/2022/07/12/microsoft-mitigates-azure-site-recovery-vulnerabilities/
CSIRT Italia
https://www.csirt.gov.it/contenuti/aggiornamenti-mensili-microsoft-al01-220713-csirt-ita
CIS - Center for Internet Security
https://www.cisecurity.org/advisory/critical-patches-issued-for-microsoft-products-july-12-2022_2022-089
Mitre CVE
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2294
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2295
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21845
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22022
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22023
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22024
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22026
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22027
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22028
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22029
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22031
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22034
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22036
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22037
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22038
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22039
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22040
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22041
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22042
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22043
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22045
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22047
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22048
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22049
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22050
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22711
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23816
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23825
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30181
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30187
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30202
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30205
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30206
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30209
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30211
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30212
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30213
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30214
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30220
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30221
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30222
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30223
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30224
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30225
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30226
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33632
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33633
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33637
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33641
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33642
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33643
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33644
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33650
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33651
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33652
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33653
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33654
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33655
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33656
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33657
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33658
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33659
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33660
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33661
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33662
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33663
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33664
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33665
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33666
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33667
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33668
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33669
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33671
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33672
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33673
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33674
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33675
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33676
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33677
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33678
GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----
iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCYs6dogAKCRDBnEyTZRJg
QsOOAJ9F4VbxI+gmSVJCWC6XInj+JnIQSgCguLWw74VXImhO01f72vWGPQQjiMg=
=T7ob
-----END PGP SIGNATURE-----
Hash: SHA256
******************************************************************
Alert ID: GCSA-22076
Data: 13 Luglio 2022
Titolo: Microsoft Security Update Luglio 2022
******************************************************************
:: Descrizione del problema
Microsoft ha rilasciato il security update mensile per Luglio 2022,
questa versione risolve 84 vulnerabilita', delle quali una zero-day.
La CVE-2022-22047 risulta essere sfruttata attivamente in rete.
Maggiori dettagli sono disponibili alla sezione "Riferimenti".
:: Software interessato
AMD CPU Branch
Azure Site Recovery
Azure Storage Library
Microsoft Defender for Endpoint
Microsoft Edge (Chromium-based)
Microsoft Graphics Component
Microsoft Office
Open Source Software
Role: DNS Server
Role: Windows Fax Service
Role: Windows Hyper-V
Skype for Business and Microsoft Lync
Windows Active Directory
Windows Advanced Local Procedure Call
Windows BitLocker
Windows Boot Manager
Windows Client/Server Runtime Subsystem
Windows Connected Devices Platform Service
Windows Credential Guard
Windows Fast FAT Driver
Windows Fax and Scan Service
Windows Group Policy
Windows IIS
Windows Kernel
Windows Media
Windows Network File System
Windows Performance Counters
Windows Point-to-Point Tunneling Protocol
Windows Portable Device Enumerator Service
Windows Print Spooler Components
Windows Remote Procedure Call Runtime
Windows Security Account Manager
Windows Server Service
Windows Shell
Windows Storage
XBox
:: Impatto
Esecuzione remota di codice arbitrario (RCE)
Denial of Service (DoS)
Acquisizione di privilegi piu' elevati (EoP)
Information Disclosure (ID)
Bypass restrizioni di sicurezza
Tampering
:: Soluzioni
Per default l'installazione degli aggiornamenti
avviene in maniera automatica.
Per installare manualmente scegliere
Start > Impostazioni > Aggiornamento e Sicurezza > Windows Update
Verificare di aver installato la versione piu' recente del
Servicing Stack Updates
https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001
https://docs.microsoft.com/it-it/windows/deployment/update/servicing-stack-updates
Windows Update domande frequenti
https://support.microsoft.com/en-us/help/12373/windows-update-faq
Gli aggiornamenti sono disponibili anche tramite il catalogo di Microsoft Update
https://www.catalog.update.microsoft.com/
Gli utenti che utilizzano ancora Windows 7, Windows Server 2008 o 2008 R2
devono acquistare l'Extended Security Update per continuare a ricevere gli aggiornamenti
https://support.microsoft.com/en-hk/help/4522133/procedure-to-continue-receiving-security-updates
:: Riferimenti
Microsoft Security Updates - Release Notes
https://msrc.microsoft.com/update-guide/releaseNote/2022-Jul
https://msrc-blog.microsoft.com/2022/07/12/microsoft-mitigates-azure-site-recovery-vulnerabilities/
CSIRT Italia
https://www.csirt.gov.it/contenuti/aggiornamenti-mensili-microsoft-al01-220713-csirt-ita
CIS - Center for Internet Security
https://www.cisecurity.org/advisory/critical-patches-issued-for-microsoft-products-july-12-2022_2022-089
Mitre CVE
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2294
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2295
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21845
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22022
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22023
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22024
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22026
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22027
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22028
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22029
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22031
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22034
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22036
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22037
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22038
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22039
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22040
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22041
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22042
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22043
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22045
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22047
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22048
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22049
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22050
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22711
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23816
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23825
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30181
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30187
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30202
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30203
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30205
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30206
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30209
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30211
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30212
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30213
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30214
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30215
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30216
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30220
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30221
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30222
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30223
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30224
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30225
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30226
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33632
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33633
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33637
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33641
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33642
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33643
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33644
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33650
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33651
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33652
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33653
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33654
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33655
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33656
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33657
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33658
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33659
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33660
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33661
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33662
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33663
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33664
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33665
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33666
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33667
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33668
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33669
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33671
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33672
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33673
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33674
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33675
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33676
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33677
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-33678
GARR CERT Security Alert - subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----
iF0EAREIAB0WIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCYs6dogAKCRDBnEyTZRJg
QsOOAJ9F4VbxI+gmSVJCWC6XInj+JnIQSgCguLWw74VXImhO01f72vWGPQQjiMg=
=T7ob
-----END PGP SIGNATURE-----