보안이슈

보안이슈

게시물 상세
[EhostICT] MS 1월 보안 위협에 따른 정기 보안 업데이트 권고
작성자 : 관리자(jieun@ehostidc.co.kr)  작성일 : 2022-01-21   조회수 : 9875

□ 1월 보안업데이트 개요(총 11종)

 o 등급 : 긴급(Critical) 8종, 중요(Important) 3종

 o 발표일 : 2022.1.12.(수)

 o 업데이트 내용

제품군

중요도

영향

Windows 11

긴급

원격 코드 실행

Windows 10 v21H2, v21H1, v20H2, v1909

긴급

원격 코드 실행

Windows Server 2022, Windows Server 22019, Windows Server 2016  Server Core 설치(2019, 2016, v20H2, v2004)

긴급

원격 코드 실행

Windows Server 2022

긴급

원격 코드 실행

Windows Server 2019, Windows Server 2016, Server Core 설치(2019, 2016, v20H2)

긴급

원격 코드 실행

Windows 8.1, Windows Server 2012 R2, Windows Server 2012

긴급

원격 코드 실행

Microsoft Office

긴급

원격 코드 실행

Microsoft SharePoint

긴급

원격 코드 실행

Microsoft Exchange Server

긴급

원격 코드 실행

Microsoft .NET

중요

서비스 거부

Microsoft Dynamics 365

중요

스푸핑

Windows 데스크톱용 원격 데스크톱 클라이언트

중요

원격 코드 실행

 


[참고 사이트]

[1] (한글) https://portal.msrc.microsoft.com/ko-kr/security-guidance

[2] (영문) https://portal.msrc.microsoft.com/en-us/security-guidance

[3] https://msrc.microsoft.com/update-guide/releaseNote/2022-Jan

[4] https://msrc.microsoft.com/update-guide




o 취약점 요약 정보

제품 카테고리

CVE 번호

CVE 제목

.NET Framework


CVE-2022-21911

.NET Framework 서비스거부취약성

Microsoft Dynamics


CVE-2022-21932

Microsoft Dynamics 365 Customer Engagement 교차사이트스크립팅취약성

Microsoft Dynamics


CVE-2022-21891

Microsoft Dynamics 365 판매스푸핑취약성

Microsoft Exchange Server


CVE-2022-21969

Microsoft Exchange Server 원격코드실행취약성

Microsoft Exchange Server


CVE-2022-21855

Microsoft Exchange Server 원격코드실행취약성

Microsoft Exchange Server


CVE-2022-21846

Microsoft Exchange Server 원격코드실행취약성

Microsoft Graphics Component


CVE-2022-21915

Windows GDI+ 정보유출취약성

Microsoft Graphics Component


CVE-2022-21904

Windows GDI 정보유출취약성

Microsoft Graphics Component


CVE-2022-21903

Windows GDI 권한상승취약성

Microsoft Graphics Component


CVE-2022-21880

Windows GDI+ 정보유출취약성

Microsoft Office


CVE-2022-21840

Microsoft Office 원격코드실행취약성

Microsoft Office Excel


CVE-2022-21841

Microsoft Excel 원격코드실행취약성

Microsoft Office SharePoint


CVE-2022-21837

Microsoft SharePoint Server 원격코드실행취약성

Microsoft Office Word


CVE-2022-21842

Microsoft Word 원격코드실행취약성

Microsoft Windows Codecs Library


CVE-2022-21917

HEVC 비디오확장원격코드실행취약성

Open Source Software


CVE-2021-22947

오픈소스 Curl 원격코드실행취약성

Role: Windows Hyper-V


CVE-2022-21905

Windows Hyper-V 보안기능우회취약성

Role: Windows Hyper-V


CVE-2022-21901

Windows Hyper-V 권한상승취약성

Role: Windows Hyper-V


CVE-2022-21900

Windows Hyper-V 보안기능우회취약성

Role: Windows Hyper-V


CVE-2022-21847

Windows Hyper-V 서비스거부취약성

Tablet Windows User Interface


CVE-2022-21870

태블릿 Windows 사용자인터페이스응용프로그램핵심권한상승취약성

Windows Account Control


CVE-2022-21859

Windows 계정제어판권한상승취약성

Windows Active Directory


CVE-2022-21857

Active Directory Domain Services Elevation of Privilege Vulnerability

Windows AppContracts API Server


CVE-2022-21860

Windows AppContracts API 서버권한상승취약성

Windows Application Model


CVE-2022-21862

Windows 응용프로그램모델 Core API 권한상승취약성

Windows BackupKey Remote Protocol


CVE-2022-21925

Windows BackupKey 원격프로토콜보안기능우회취약성

Windows Bind Filter Driver


CVE-2022-21858

Windows Bind Filter 드라이버권한상승취약성

Windows Certificates


CVE-2022-21836

Windows 인증서스푸핑취약성

Windows Cleanup Manager


CVE-2022-21838

Windows 정리관리자권한상승취약성

Windows Clipboard User Service


CVE-2022-21869

클립보드사용자서비스권한상승취약성

Windows Cluster Port Driver


CVE-2022-21910

Microsoft 클러스터포트드라이버권한상승취약성

Windows Common Log File System Driver


CVE-2022-21916

Windows 공용로그파일시스템드라이버권한상승취약성

Windows Common Log File System Driver


CVE-2022-21897

Windows 공용로그파일시스템드라이버권한상승취약성

Windows Connected Devices Platform Service


CVE-2022-21865

연결된디바이스플랫폼서비스권한상승취약성

Windows Cryptographic Services


CVE-2022-21835

Microsoft 암호화서비스권한상승취약성

Windows Defender


CVE-2022-21921

Windows Defender Credential Guard 보안기능우회취약성

Windows Defender


CVE-2022-21906

Windows Defender Application Control 보안기능우회취약성

Windows Devices Human Interface


CVE-2022-21868

Windows 장치휴먼인터페이스권한상승취약성

Windows Diagnostic Hub


CVE-2022-21871

Microsoft 진단허브표준수집기런타임권한상승취약성

Windows DirectX


CVE-2022-21918

DirectX 그래픽커널파일서비스거부취약성

Windows DirectX


CVE-2022-21912

DirectX 그래픽커널원격코드실행취약성

Windows DirectX


CVE-2022-21898

DirectX 그래픽커널원격코드실행취약성

Windows DWM Core Library


CVE-2022-21902

Windows DWM 핵심라이브러리권한상승취약성

Windows DWM Core Library


CVE-2022-21896

Windows DWM 핵심라이브러리권한상승취약성

Windows DWM Core Library


CVE-2022-21852

Windows DWM 핵심라이브러리권한상승취약성

Windows Event Tracing


CVE-2022-21872

Windows 이벤트추적권한상승취약성

Windows Event Tracing


CVE-2022-21839

Windows 이벤트추적 DACL(임의액세스제어목록) 서비스거부취약성

Windows Geolocation Service


CVE-2022-21878

Windows 지리적위치서비스원격코드실행취약성

Windows HTTP Protocol Stack


CVE-2022-21907

HTTP 프로토콜스택원격코드실행취약성

Windows IKE Extension


CVE-2022-21890

Windows IKE Extension Denial of Service Vulnerability

Windows IKE Extension


CVE-2022-21889

Windows IKE Extension Denial of Service Vulnerability

Windows IKE Extension


CVE-2022-21883

Windows IKE Extension Denial of Service Vulnerability

Windows IKE Extension


CVE-2022-21849

Windows IKE Extension Remote Code Execution Vulnerability

Windows IKE Extension


CVE-2022-21848

Windows IKE Extension Denial of Service Vulnerability

Windows IKE Extension


CVE-2022-21843

Windows IKE Extension Denial of Service Vulnerability

Windows Installer


CVE-2022-21908

Windows Installer 권한상승취약성

Windows Kerberos


CVE-2022-21920

Windows Kerberos 권한상승취약성

Windows Kernel


CVE-2022-21881

Windows 커널권한상승취약성

Windows Kernel


CVE-2022-21879

Windows 커널권한상승취약성

Windows Libarchive


CVE-2021-36976

Libarchive 원격코드실행취약성

Windows Local Security Authority


CVE-2022-21913

로컬보안기관(도메인정책) 원격프로토콜보안기능우회

Windows Local Security Authority Subsystem Service


CVE-2022-21884

Local Security Authority Subsystem Service 권한상승취약성

Windows Modern Execution Server


CVE-2022-21888

Windows 최신실행서버원격코드실행취약성

Windows Push Notifications


CVE-2022-21867

Windows 푸시알림권한상승취약성

Windows RDP


CVE-2022-21893

원격데스크톱프로토콜원격코드실행취약성

Windows RDP


CVE-2022-21851

원격데스크톱클라이언트원격코드실행취약성

Windows RDP


CVE-2022-21850

원격데스크톱클라이언트원격코드실행취약성

Windows Remote Access Connection Manager


CVE-2022-21914

Windows 원격액세스연결관리자권한상승취약성

Windows Remote Access Connection Manager


CVE-2022-21885

Windows 원격액세스연결관리자권한상승취약성

Windows Remote Desktop


CVE-2022-21964

원격데스크톱라이선싱진단도구정보유출취약성

Windows Remote Procedure Call Runtime


CVE-2022-21922

원격프로시저호출런타임원격코드실행취약성

Windows Resilient File System (ReFS)


CVE-2022-21963

Windows ReFS(복원파일시스템) 원격코드실행취약성

Windows Resilient File System (ReFS)


CVE-2022-21962

Windows ReFS(복원파일시스템) 원격코드실행취약성

Windows Resilient File System (ReFS)


CVE-2022-21961

Windows ReFS(복원파일시스템) 원격코드실행취약성

Windows Resilient File System (ReFS)


CVE-2022-21960

Windows ReFS(복원파일시스템) 원격코드실행취약성

Windows Resilient File System (ReFS)


CVE-2022-21959

Windows ReFS(복원파일시스템) 원격코드실행취약성

Windows Resilient File System (ReFS)


CVE-2022-21958

Windows ReFS(복원파일시스템) 원격코드실행취약성

Windows Resilient File System (ReFS)


CVE-2022-21928

Windows ReFS(복원파일시스템) 원격코드실행취약성

Windows Resilient File System (ReFS)


CVE-2022-21892

Windows ReFS(복원파일시스템) 원격코드실행취약성

Windows Secure Boot


CVE-2022-21894

보안부팅보안기능우회취약성

Windows Security Center


CVE-2022-21874

Windows 보안센터 API 원격코드실행취약성

Windows StateRepository API


CVE-2022-21863

Windows StateRepository API 서버파일권한상승취약성

Windows Storage


CVE-2022-21875

Windows 저장소권한상승취약성

Windows Storage Spaces Controller


CVE-2022-21877

저장소공간컨트롤러정보유출취약성

Windows System Launcher


CVE-2022-21866

Windows 시스템시작관리자권한상승취약성

Windows Task Flow Data Engine


CVE-2022-21861

작업흐름데이터엔진권한상승취약성

Windows Tile Data Repository


CVE-2022-21873

타일데이터리포지토리권한상승취약성

Windows UEFI


CVE-2022-21899

Windows 확장가능펌웨어인터페이스보안기능우회취약성

Windows UI Immersive Server


CVE-2022-21864

Windows UI 모던서버 API 권한상승취약성

Windows User Profile Service


CVE-2022-21919

Windows 사용자프로필서비스권한상승취약성

Windows User Profile Service


CVE-2022-21895

Windows 사용자프로필서비스권한상승취약성

Windows User-mode Driver Framework


CVE-2022-21834

Windows 사용자모드드라이버프레임워크리플렉터드라이버권한상승취약성

Windows Virtual Machine IDE Drive


CVE-2022-21833

가상머신 IDE 드라이브권한상승취약성

Windows Win32K


CVE-2022-21887

Win32k 권한상승취약성

Windows Win32K


CVE-2022-21882

Win32k 권한상승취약성

Windows Win32K


CVE-2022-21876

Win32k 정보유출취약성

Windows Workstation Service Remote Protocol


CVE-2022-21924

워크스테이션서비스원격프로토콜보안기능우회취약성

 

 

 

□ 작성 : 침해사고분석단 취약점분석팀

이전글 [EhostICT] Adobe 제품 보안 업데이트 권고
다음글 [EhostICT] Wordpress 보안 업데이트 권고