Microsoft Security Update Releases Issued: September 2, 2022

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256

**************************************************************************************

Title: Microsoft Security Update Releases

Issued: September 2, 2022

**************************************************************************************

IMPORTANT ANNOUNCEMENT: Please note that we have successfully transitioned to the new system for delivering Microsoft Technical Security Notifications, and after Update Tuesday on September 13, 2022 we will no longer send notifications via the legacy Security Notification Service. If you wish to continue receiving monthly Microsoft Security Update Summaries and Microsoft Security Update Revisions notifications, see "Security Update Guide Notification System News: Create your profile now"

(https://msrc-blog.microsoft.com/2022/08/09/security-update-guide-notification-system-news-create-your-profile-now/).

Summary

=======

The following Microsoft Edge CVE has been released on September 1, 2022.

* CVE-2022-38012

 - CVE-2022-38012 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

 - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38012

 - Reason for Revision: Information published.

 - Originally posted: September 1, 2022

 - Updated: N/A

 - Aggregate CVE Severity Rating: Low

The following CVEs were assigned by Chrome. Microsoft Edge

(Chromium-based) ingests Chromium, which addresses these vulnerabilities. Please see Google Chrome Releases (https://chromereleases.googleblog.com/2022) for more information.

See

https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/

for more information about third-party CVEs in the Security Update Guide.

* CVE-2022-3038

* CVE-2022-3039

* CVE-2022-3040

* CVE-2022-3041

* CVE-2022-3044

* CVE-2022-3045

* CVE-2022-3046

* CVE-2022-3047

* CVE-2022-3053

* CVE-2022-3054

* CVE-2022-3055

* CVE-2022-3056

* CVE-2022-3057

* CVE-2022-3058

Revision Information:

=====================

 - Version 1.0

 - Reason for Revision: Information published.

 - Originally posted: September 1, 2022

**************************************************************************************

Other Information

=================

Recognize and avoid fraudulent email to Microsoft customers:

======================================================================================

If you receive an email message that claims to be distributing a Microsoft security update, it is a hoax that may contain malware or pointers to malicious websites.

Microsoft does not distribute security updates via email.