Windows Defender Credential Guard Update und Revision (9./15.August 2022)

[English]Microsoft hat zum Patchday, 9. August 2022, mit den ausgerollten Updates auch am Windows Defender Credential Guard herumgepatcht. Dabei wurden sowohl eine Elevation of Privilege-Schwachstelle als auch eine Security Feature Bypass-Schwachstelle geschlossen. Allerdings hatte Microsoft dazu keine Dokumentation vorgelegt.

Das hat man nun mit einer Microsoft Security Update Revisions-Mitteilung nachgeholt. Ich stelle die betreffende Information hier mal im Blog ein.

******************************************
Title: Microsoft Security Update Revisions
Issued: August 15, 2022
*****************************************

Summary
=======

The following CVEs have undergone a revision increment.
=========================================

* CVE-2022-34711
* CVE-2022-35822

– CVE-2022-34711 | Windows Defender Credential Guard Elevation of Privilege
Vulnerability
– Version: 1.0
– Reason for Revision: Information published. This CVE was addressed by updates that
were released in August 2022, but the CVE was inadvertently omitted from the
August 2022 Security Updates. This is an informational change only. Customers
who have already installed the August 2022 update do not need to take any further
action.
– Originally posted: August 15, 2022
– Updated: N/A
– Aggregate CVE Severity Rating: Important

– CVE-2022-35822 | Windows Defender Credential Guard Security Feature Bypass
Vulnerability
– Version: 1.0
– Reason for Revision: Information published. This CVE was addressed by updates that
were released in August 2022, but the CVE was inadvertently omitted from the
August 2022 Security Updates. This is an informational change only. Customers
who have already installed the August 2022 update do not need to take any further
action.
– Originally posted: August 15, 2022
– Updated: N/A
– Aggregate CVE Severity Rating: Important

Die Patches sind in Windows 10/11 und den entsprechenden Server-Pendants vom 9. August 2022 enthalten.