Tripwire Patch Priority Index for July 2022 | The State of Security

Tripwire’s July 2022 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft and Adobe.

First on the patch priority list this month are patches that resolve 2 vulnerabilities in Edge.

Next is a patch that resolves a security feature bypass vulnerability in Office.

Up next are patches for Adobe Reader and Acrobat that resolve 22 issues including arbitrary code execution and memory leak vulnerabilities.

Up next are patches that affect components of the Windows operating systems. These patches resolve over 35 vulnerabilities, including elevation of privilege, information disclosure, security feature bypass, remote code execution, and denial of service vulnerabilities. These vulnerabilities affect core Windows, Kernel, Media Center, Print Spooler, Network File System, Advanced Local Procedure Call, Graphics, GDI+, CSRSS, BitLocker, and others.

Lastly, administrators should focus on server-side patches for Hyper-V, Network File System (NFS), Skype for Business and Microsoft Lync, Server Service, Active Directory, IIS, and DNS. These resolve remote code execution, elevation of privilege, Information Disclosure, Tampering, and Denial of Service vulnerabilities.