{"metadata": {"vulnerability": "CVE-2022-22047", "count": 76, "kinds": {"milestone": 6, "sighting": 30, "kev": 11, "other": 29}}, "data": [{"timestamp": "2021-12-16T00:00:00Z", "date_only": false, "value": "2021-12-16T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-22047", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-07-12T00:00:00Z", "date_only": false, "value": "2022-07-12T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-22047", "field": "timestamps.asserted_at", "uuid": "20eb664f-66c9-420a-806b-0fb942f2ca73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-12T00:00:00Z", "date_only": false, "value": "2022-07-12T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-22047", "field": "timestamps.asserted_at", "uuid": "c2d5e831-8453-451b-9b06-a163ce0c2a37", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-12T00:00:00Z", "date_only": true, "value": "2022-07-12", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-22047", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2022-07-12T00:00:00Z", "date_only": false, "value": "2022-07-12T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-22047", "field": "evidence.0.details.added_date", "uuid": "c2d5e831-8453-451b-9b06-a163ce0c2a37", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-12T00:00:00Z", "date_only": false, "value": "2022-07-12T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202207-0874", "record": "VAR-202207-0874", "field": "sources_release_date.data.0.date"}, {"timestamp": "2022-07-12T00:00:00Z", "date_only": true, "value": "2022-07-12", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-22047", "field": "evidence.0.details.date_added", "uuid": "20eb664f-66c9-420a-806b-0fb942f2ca73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-12T00:00:00Z", "date_only": false, "value": "2022-07-12T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-22047", "field": "timestamps.first_seen_at", "uuid": "20eb664f-66c9-420a-806b-0fb942f2ca73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-12T00:00:00Z", "date_only": false, "value": "2022-07-12T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-22047", "field": "timestamps.first_seen_at", "uuid": "c2d5e831-8453-451b-9b06-a163ce0c2a37", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-12T00:00:00Z", "date_only": false, "value": "2022-07-12T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-22047", "field": "status.status_updated_at", "uuid": "20eb664f-66c9-420a-806b-0fb942f2ca73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-12T00:00:00Z", "date_only": false, "value": "2022-07-12T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-22047", "field": "status.status_updated_at", "uuid": "c2d5e831-8453-451b-9b06-a163ce0c2a37", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-12T00:00:00Z", "date_only": false, "value": "2022-07-12T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-22047", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2022-07-12T07:00:00Z", "date_only": false, "value": "2022-07-12T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-22047", "record": "MSRC_CVE-2022-22047", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-07-12T07:00:00Z", "date_only": false, "value": "2022-07-12T07:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-22047", "record": "MSRC_CVE-2022-22047", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-07-12T07:00:00Z", "date_only": false, "value": "2022-07-12T07:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2022-22047", "field": "containers.cna.datePublic"}, {"timestamp": "2022-07-12T07:00:00Z", "date_only": false, "value": "2022-07-12T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-22047", "record": "MSRC_CVE-2022-22047", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-07-12T07:00:00Z", "date_only": false, "value": "2022-07-12T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-22047", "record": "MSRC_CVE-2022-22047", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-07-12T20:46:06Z", "date_only": false, "value": "2022-07-12T20:46:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/3164", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "b19978db-ac79-4d96-9bca-892ab0a71b0d", "content": "\u034fMicrosoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 PatchTuesday 2022, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0432 0-day \u0438 \u0435\u0449\u0451 84 \u0431\u0430\u0433\u0438.\n\n\u0421\u0440\u0435\u0434\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 4 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a RCE.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u0437\u0430\u043a\u0440\u044b\u0442\u044b 52 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \n \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 4 - \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 12 -  RCE, 11 - \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 5 - \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0435\u0449\u0451 \u0434\u0432\u0435 \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Microsoft Edge.\n\n\u041f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0439 Microsoft \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 0-day \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2022-22047 \u0438\u043b\u0438 Windows CSRSS Elevation of Privilege Vulnerability.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 SYSTEM \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Microsoft Threat Intelligence Center (MSTIC) \u0438 Microsoft Security Response Center (MSRC).\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0430\u0442\u0447\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u043f\u043e\u043b\u043d\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435.", "url": "https://t.me/true_secator/3164"}, {"timestamp": "2022-07-12T22:37:16Z", "date_only": false, "value": "2022-07-12T22:37:16.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-22047", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-07-12T23:15:00Z", "date_only": false, "value": "2022-07-12T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P4J8-4HV2-8733", "record": "GHSA-P4J8-4HV2-8733", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-07-12T23:15:00Z", "date_only": false, "value": "2022-07-12T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-22047", "record": "GSD-2022-22047", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-07-12T23:15:10.343Z", "date_only": false, "value": "2022-07-12T23:15:10.343000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202207-0874", "record": "VAR-202207-0874", "field": "sources_release_date.data.3.date"}, {"timestamp": "2022-07-12T23:15:10.343Z", "date_only": false, "value": "2022-07-12T23:15:10.343", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-22047", "record": "FKIE_CVE-2022-22047", "field": "published"}, {"timestamp": "2022-07-13T00:00:00Z", "date_only": false, "value": "2022-07-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-633", "record": "CERTFR-2022-AVI-633", "field": "last_revision_date"}, {"timestamp": "2022-07-13T00:00:00Z", "date_only": false, "value": "2022-07-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-633", "record": "CERTFR-2022-AVI-633", "field": "initial_release_date"}, {"timestamp": "2022-07-13T00:00:00Z", "date_only": false, "value": "2022-07-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-633", "record": "CERTFR-2022-AVI-633", "field": "revisions.0.revision_date"}, {"timestamp": "2022-07-13T00:00:39Z", "date_only": false, "value": "2022-07-13T00:00:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P4J8-4HV2-8733", "record": "GHSA-P4J8-4HV2-8733", "field": "published"}, {"timestamp": "2022-07-13T04:00:00Z", "date_only": false, "value": "2022-07-13T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=833", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "6778cad5-6201-4b62-9f5e-f35ed7e8efa5", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=833"}, {"timestamp": "2022-07-14T06:07:21Z", "date_only": false, "value": "2022-07-14T06:07:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/9958", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "bad8e49b-bd10-4abe-9a89-627d948729da", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2022-22047: Windows CSRSS Elevation of Privilege Zero-Day Vulnerability.\n\nhttps://securityonline.info/cve-2022-22047-windows-csrss-elevation-of-privilege-0-day-vulnerability/", "url": "https://t.me/cKure/9958"}, {"timestamp": "2022-07-17T08:53:31Z", "date_only": false, "value": "2022-07-17T08:53:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/V3_8N6ZUWQ9rL5z501KvYGFV3sn8qhA78QOreSFS4fpoDQ", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "f1b6c003-39ea-4f6b-8aaf-057729fcc2db"}, {"timestamp": "2022-07-17T22:52:10Z", "date_only": false, "value": "2022-07-17T22:52:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/848", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "e12c365e-1442-4392-afeb-947fa1990756", "content": "Updates On Hackbyte Forum:-\n\n\ud83d\udcccLeman2 Leak\n\ud83d\udccc26M ESKIMI.COM DATABASE\n\ud83d\udcccEtisalcom Bahrain Telecom Bahrain\n\ud83d\udcccLock Screen Bypass Exploit of Android Devices (CVE-2022\u201320006)\n\ud83d\udcccSonarQube_Data_Center\n\ud83d\udcccProton_Privacy_Decoded: Script to Explore ProtonMail and Vpn\n\ud83d\udcccRandy: A pre-authenticated RCE exploit for Inductive Automation Ignition\n\ud83d\udcccOnionWallet Leak\n\ud83d\udcccUAC bypass for x64 Windows 7 \u2013 11\n\ud83d\udcccDecompiler Explorer! Compare tools on the forefront of static analysis, now in your web browser!\n\ud83d\udcccAbuse Cloudflare Zerotrust for C2 channels\n\ud83d\udcccCobaltstrike_all_kits\n\ud83d\udcccBypass Windows Defender by utilizing malicious SMB requests inside MS Word Macro\n\ud83d\udcccHTB Business CTF 2022: Dirty Money\n\ud83d\udcccLEAK WORK.UA\n\ud83d\udcccTurniketov.net Leak\n\ud83d\udcccVK.com Leak 2022\n\ud83d\udcccKuban 1k b2b Leak\n\ud83d\udccc9k_doc_fr_selfie Kyc Leak\n\ud83d\udcccIDA Plugin to reconstruct .proto files used in the analyzed binary\n\ud83d\udcccLDAP shell\n\ud83d\udcccHiddenCPG - a vulnerable clone detection system\n\ud83d\udcccInvestigator - An online handy-recon tool.\n\ud83d\udcccBFAC - Burp Extension for BFAC (Advanced Backup-File Artifacts Testing for Web-Applications)\n\ud83d\udcccReoSploit - A Tool that Finds, Enumerates, and #exploits Reolink Cameras.\n\ud83d\udcccElectroMagnetic Mining Array (EMMA)\n\ud83d\udcccblindssl - Disable SSL certificate verification using eBPF\n\ud83d\udcccPCICrash - PCIDriverKit PoC for CVE-2022-26763 (exec arbitrary code w/ system privileges).\n\ud83d\udcccAntares - Cross-platform #SQL client.\n\ud83d\udcccFAME - Recursive acronym meaning \u201cFAME Automates Malware Evaluation\u201d.\n\ud83d\udcccActive Directory Attacks\n\ud83d\udcccCVE-2022-22047: Windows CSRSS Elevation of Privilege Zero-Day Vulnerability.\n\ud83d\udcccAccount hijacking using \u201cdirty dancing\u201d in sign-in OAuth-flows\n\n\ud83d\udc49\ud83c\udffb\ud83d\udc49\ud83c\udffb Updates:- https://bit.ly/3yRyah3 \ud83d\udc48\ud83c\udffb\ud83d\udc48\ud83c\udffb", "url": "https://t.me/crackcodes/848"}, {"timestamp": "2022-07-20T00:00:00Z", "date_only": false, "value": "2022-07-20T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202207-0874", "record": "VAR-202207-0874", "field": "sources_release_date.data.1.date"}, {"timestamp": "2022-07-20T08:43:00Z", "date_only": false, "value": "2022-07-20T08:43:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202207-0874", "record": "VAR-202207-0874", "field": "sources_update_date.data.1.date"}, {"timestamp": "2022-07-28T12:01:02Z", "date_only": false, "value": "2022-07-28T12:01:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/3227", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "6715928b-d5ef-4df4-ade8-cdadb648df51", "content": "Microsoft \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 Knotweed \u0430\u0432\u0441\u0442\u0440\u0438\u0439\u0441\u043a\u043e\u043c\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f DSIRF, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0438\u0435 \u0438 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0430\u0431\u043e\u0440\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e Subzero.\n\nDSIRF \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442\u00a0\u0441\u0435\u0431\u044f\u00a0\u043a\u0430\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f\u043c \u0443\u0441\u043b\u0443\u0433\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0418\u0411, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0435\u043d\u0438\u0441\u0442, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u043a\u0443 \u0438 OSINT.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0440\u0435\u0441\u0435\u0447\u0440\u0435\u0440\u044b \u0443\u0431\u0435\u0436\u0434\u0435\u043d\u044b \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e Subzero, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0435\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432, \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432, \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u0434\u0435\u0432\u0430\u0439\u0441\u043e\u0432, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u043a \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443.\n\n\u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044f DNS \u043f\u0440\u0438 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0430\u0442\u0430\u043a Knotweed, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f RiskIQ \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2020 \u0433\u043e\u0434\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 DSIRF, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0435\u0433\u043e \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442 \u0438 \u0434\u043e\u043c\u0435\u043d\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u043e\u0442\u043b\u0430\u0434\u043a\u0438 \u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e Subzero.\n\nMMSTIC \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0441\u0432\u044f\u0437\u0438 \u043c\u0435\u0436\u0434\u0443 DSIRF \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 Knotweed.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u04212, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 DSIRF \u0443\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c GitHub, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0430\u044f\u0441\u044f \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0430\u0442\u0430\u043a, \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u0434\u0430, \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0439 DSIRF, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435.\n\n\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 Knotweed \u0431\u044b\u043b\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u044e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0444\u0438\u0440\u043c\u044b, \u0431\u0430\u043d\u043a\u0438 \u0438 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0410\u0432\u0441\u0442\u0440\u0438\u044e, \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u044e \u0438 \u041f\u0430\u043d\u0430\u043c\u0443. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0436\u0435\u0440\u0442\u0432\u044b Subzero \u0443\u0441\u043b\u0443\u0433\u0438 \u0432 DSIRF \u0435\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043d\u0435 \u0437\u0430\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438.\n\n\u041d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 Corelump, \u043e\u0441\u043d\u043e\u0432\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0430\u0441\u044c \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438 \u0434\u043b\u044f \u0443\u0445\u043e\u0434\u0430 \u043e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0438 Jumplump, \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438 \u043f\u043e\u0434\u0433\u0440\u0443\u0436\u0430\u043b Corelump.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Subzero \u0438\u043c\u0435\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0444\u0438\u043a\u0441\u0430\u0446\u0438\u044e \u043d\u0430\u0436\u0430\u0442\u0438\u0439 \u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u044b, \u0437\u0430\u0445\u0432\u0430\u0442 \u0441\u043d\u0438\u043c\u043a\u043e\u0432 \u044d\u043a\u0440\u0430\u043d\u0430, \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432, \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0441 \u04212.\n\n\u0412 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 Knotweed, \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Microsoft \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0440\u044f\u0434\u0430 0-day.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, CVE-2022-22047 \u043f\u043e\u043c\u043e\u0433\u0430\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435. \u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 Knotweed \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 Windows (CVE-2021-31199 \u0438 CVE-2021-31201) \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c Adobe Reader (CVE-2021-28550), \u0432\u0441\u0435 \u043e\u043d\u0438 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0438\u044e\u043d\u0435 2021.\n\n\u0412 2021 \u0433\u043e\u0434\u0443 \u0433\u0440\u0443\u043f\u043f\u0430 \u043a\u0438\u0431\u0435\u0440\u043d\u0430\u0435\u043c\u043d\u0438\u043a\u043e\u0432 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 Windows \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 Windows Update Medic (CVE-2021-36948), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u043b\u0443\u0436\u0431\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0439 DLL.\n\nMicrosoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0449\u0438\u0442\u044f\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 Knotweed \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0416\u0434\u0435\u043c \u043d\u043e\u0432\u044b\u0445 \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0435\u043d\u0438\u0439. \u041a\u0440\u0435\u0441\u0442\u043e\u0432\u044b\u0439 \u043f\u043e\u0445\u043e\u0434 \u043d\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u0432 \u0442\u0440\u0435\u043d\u0434\u0435.", "url": "https://t.me/true_secator/3227"}, {"timestamp": "2022-08-01T15:51:18Z", "date_only": false, "value": "2022-08-01T15:51:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/996", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "2d28e9a3-10a7-44b4-8d13-de1c8d83f6e7", "content": "\u200b\ud83d\udcb0 Microsoft \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 52 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\ud83d\udcac Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0438 84 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a. 4 \u0438\u0437 84 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u00ab\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435\u00bb, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430. \u0412\u043e\u0442 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043a\u0430\u0436\u0434\u043e\u0439 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\n\u2014 52 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n\u2014 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438;\n\u2014 12 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439;\n\u2014 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438;\n\u2014 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438.\n\n\u0413\u043b\u0430\u0432\u043d\u043e\u0435 \u2014 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0415\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 Microsoft Threat Intelligence Center \u0438 Microsoft Security Response Center.\n\n\u00abCVE-2022-22047 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Windows CSRSS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u044d\u0442\u043e\u0433\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\u00bb, \u2014 \u0437\u0430\u044f\u0432\u0438\u043b\u0430 Microsoft.\n\n\u0418\u0437\u0434\u0430\u043d\u0438\u0435 BleepingComputer \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u043e \u043f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0437\u0430 \u0438\u044e\u043b\u044c 2022 \u0433\u043e\u0434\u0430 \u043d\u0430 \u044d\u0442\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435.\n\n#Microsoft #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u0425\u0430\u043a\u0435\u0440\u044b \n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/996"}, {"timestamp": "2022-08-02T00:00:00Z", "date_only": true, "value": "2022-08-02", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-22047", "field": "evidence.0.details.due_date", "uuid": "20eb664f-66c9-420a-806b-0fb942f2ca73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-04T14:55:30Z", "date_only": false, "value": "2022-08-04T14:55:30.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/31444f14-211f-42e7-b9a5-50413099a216", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "f700a373-2426-4c45-8eed-2050beb1de43"}, {"timestamp": "2023-03-22T13:18:02Z", "date_only": false, "value": "2023-03-22T13:18:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/cc55d271-bff7-4045-b449-ee50dd0149e1", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "7cd9c7f4-54f4-4f8f-a2f4-8142a68c7012"}, {"timestamp": "2023-05-17T17:15:00Z", "date_only": false, "value": "2023-05-17T17:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-22047", "record": "GSD-2022-22047", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-05-18T00:00:00Z", "date_only": false, "value": "2023-05-18T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202207-0874", "record": "VAR-202207-0874", "field": "sources_update_date.data.2.date"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "52c53705-bf11-40c6-bc76-d580dd5d6e46"}, {"timestamp": "2023-08-08T00:00:00Z", "date_only": false, "value": "2023-08-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202207-0874", "record": "VAR-202207-0874", "field": "sources_update_date.data.0.date"}, {"timestamp": "2023-09-21T09:26:48Z", "date_only": false, "value": "2023-09-21T09:26:48.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/avleonovrus/35", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "892cd2ed-f189-4318-bfb4-b52d37598af5", "content": "\u041c\u0430\u0439\u043a\u0440\u043e\u0441\u043e\u0444\u0442 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0442\u0432\u043e\u0440\u044f\u0442 \u0434\u0438\u0447\u044c, \u043d\u043e \u044d\u0442\u043e \u043d\u0435 \u043f\u043e\u0432\u043e\u0434 \u043d\u0435 \u043f\u0430\u0442\u0447\u0438\u0442\u044c \u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b. \u0412\u043e \u0432\u0441\u044f\u043a\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043a\u0430. \u041d\u0443 \u0438 \u0442\u043e\u0447\u043d\u043e \u043d\u0435 \u043f\u043e\u0432\u043e\u0434 \u043d\u0435 \u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \ud83d\ude42 \u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0432\u0438\u0434\u044f\u0448\u043a\u0430 \u043f\u0440\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 Patch Tuesday \u0431\u0443\u0434\u0435\u0442, \u043d\u043e \u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e \u043f\u043e\u0440\u0430\u043d\u044c\u0448\u0435, \u0432\u044b\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e \u0440\u0435\u043f\u043e\u0440\u0442 Vulristics. \u0422\u0435\u043f\u0435\u0440\u044c \u0432\u0441\u0451 \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043d\u0435\u0441\u0443 \u0432 \u0442\u0435\u043b\u0435\u0436\u0435\u043d\u044c\u043a\u0443 avleonovrus. \ud83d\ude09\n\n\u0427\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e. \u0421\u0432\u0435\u0440\u0445\u0443 \u0441\u043f\u0438\u0441\u043a\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0432\u0436\u0438\u0432\u0443\u044e Elevation of Privilege \u0432 Windows CSRSS (CVE-2022-22047), \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u0435\u0439\u043d\u0441\u0442\u0440\u0438\u043c\u043d\u044b\u0435 \u043c\u0435\u0434\u0438\u0430 \u043f\u0440\u043e\u0442\u0440\u0443\u0431\u0438\u043b\u0438. \u041c\u043e\u0436\u043d\u043e \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 SYSTEM. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0432\u0438\u0434\u043d\u043e. \n\n\u0414\u0430\u043b\u044c\u0448\u0435 \u043c\u0435\u043d\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. Remote Code Execution \u0432 Remote Procedure Call Runtime (CVE-2022-22038). \u0422\u0443\u0442 \u0443 Microsoft \u0435\u0441\u0442\u044c POC \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. \u041d\u043e \u0432\u0440\u044f\u0434 \u043b\u0438 \u0434\u043e\u0432\u0435\u0434\u0443\u0442 \u0434\u043e \u0447\u0435\u0433\u043e-\u0442\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e, \u0442.\u043a. Exploitation Less Likely. \n\n\u041c\u0435\u0436\u0434\u0443 \u0438\u044e\u043d\u044c\u0441\u043a\u0438\u043c \u0438 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u043c Patch Tuesday \u0432\u044b\u0448\u043b\u0430 Memory Corruption \u0432 Microsoft Edge (CVE-2022-2294), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u0438\u0434\u0438\u043c\u043e \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 RCE \u0438 Google \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \u043e\u043d\u0430 \u0432\u0436\u0438\u0432\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f.   \n\n\u0415\u0449\u0451 \u0437\u0430\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0432 \u044d\u0442\u043e\u043c Patch Tuesday \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u044b \u0432\u0441\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u0442\u043e EoP. \u0422\u0430\u043a\u0436\u0435 \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Azure Site Recovery. \u0418 EoP, \u0438 RCE, \u0438 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043c\u043d\u043e\u0433\u043e \u0441 \u043d\u0435\u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430\u043c\u0438 \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0440\u0435\u043b\u043e\u0441\u0442\u0438 POC. \u041f\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e  Azure Site Recovery \u044d\u0442\u043e \"Site Recovery is a native disaster recovery as a service (DRaaS)\", \u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0434\u043e\u043b\u0436\u043d\u043e \u043f\u0430\u0442\u0447\u0438\u0442\u044c\u0441\u044f \u0441\u0430\u043c\u0438\u043c\u0438 Microsoft, \u043d\u043e \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0442\u0430\u043c \u0435\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0445\u043e\u0441\u0442\u0430\u0445 Microsoft Azure Site Recovery suite \u0438 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0447\u0430\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u0442\u043e \u0432 \u043d\u0435\u043c. Tenable \u043f\u0440\u043e CVE-2022-33675 \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e SYSTEM.\n\n@avleonovrus #Microsoft #PatchTuesday #Vulristics", "url": "https://t.me/avleonovrus/35"}, {"timestamp": "2023-10-21T12:56:55Z", "date_only": false, "value": "2023-10-21T12:56:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/avleonovrus/36", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "65539567-b598-42c8-9af7-1b92ac457eef", "content": "\u0412\u0438\u0434\u044f\u0448\u0435\u0447\u043a\u0430 \u043f\u0440\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 Microsoft Patch Tuesday \u0438 \u043f\u0440\u043e \u0442\u043e, \u0447\u0442\u043e Microsoft \u0442\u0432\u043e\u0440\u0438\u0442 \u0434\u0438\u0447\u044c. \u0412 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0435 \u0432\u0441\u0435 \u0442\u043e \u0436\u0435, \u043e \u0447\u0435\u043c \u0442\u0443\u0442 \u043f\u0438\u0441\u0430\u043b. \u041d\u0443 \u0438 \u043f\u0440\u043e \u0440\u0435\u043f\u043e\u0440\u0442 \u043c\u0430\u0439\u043a\u0440\u043e\u0441\u043e\u0444\u0442\u043e\u0432\u0441\u043a\u0438\u0439 \u0442\u043e\u0436\u0435 \u043d\u0430\u043a\u0438\u043d\u0443\u043b \u043d\u0435\u043c\u043d\u043e\u0436\u043a\u043e \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0430\u0432\u043a\u0438. \ud83d\ude42\n\n\u2014-\n\nHello everyone! Microsoft has been acting weird lately. I mean the recent publication of a propaganda report about evil Russians and how Microsoft is involved in the conflict between countries. It wouldn't be unusual for a US government agency, NSA or CIA to publish such a report. But when a global IT vendor, which, in theory, should be more or less neutral, does this\u2026 This is a clear signal. It's not about business anymore. \n\nI'll take a closer look at this report in the next episode of the Vulnerability Management news, but for now let's take a look at Microsoft July Patch Tuesday. Yes, the vendor is behaving strangely, but Microsoft products need to be patched. Right? At least for now. And tracking vulnerabilities is always a good thing. \ud83d\ude42\n\n01:32 CSRSS Elevation of Privilege (CVE-2022-22047)\n04:36 RPC Remote Code Execution (CVE-2022-22038)\n05:44 Microsoft Edge Memory Corruption (CVE-2022-2294)\n06:55 32 vulnerabilities in Azure Site Recovery\n\nVideo: https://youtu.be/HjfxxcqWrH4\nVideo2 (for Russia): https://vk.com/video-149273431_456239096\nBlogpost: https://avleonov.com/2022/07/23/microsoft-patch-tuesday-july-2022-propaganda-report-csrss-eop-rpc-rce-edge-azure-site-recovery/\nFull report: https://avleonov.com/vulristics_reports/ms_patch_tuesday_july2022_report_with_comments_ext_img.html\n\n@avleonovrus #microsoft #patchtuesday", "url": "https://t.me/avleonovrus/36"}, {"timestamp": "2023-12-05T00:15:23Z", "date_only": false, "value": "2023-12-05T00:15:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1342", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "7daa6bd6-d0bc-4993-8d80-4a5d8c1893a9", "content": "#ExploitObserverAlert\n\nCVE-2022-22047\n\nDESCRIPTION: Exploit Observer has 5 entries related to CVE-2022-22047. Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability\n\nFIRST-EPSS: 0.000620000\nNVD-IS: 5.9\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/1342"}, {"timestamp": "2023-12-13T01:19:29.145Z", "date_only": false, "value": "2023-12-13T01:19:29.145982Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-22047", "record": "GSD-2022-22047", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-28T14:13:17.207Z", "date_only": false, "value": "2024-06-28T14:13:17.207000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202207-0874", "record": "VAR-202207-0874", "field": "sources_update_date.data.3.date"}, {"timestamp": "2024-06-28T23:17:00.827Z", "date_only": false, "value": "2024-06-28T23:17:00.827000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202207-0874", "record": "VAR-202207-0874", "field": "last_update_date"}, {"timestamp": "2024-07-16T22:09:40.406Z", "date_only": false, "value": "2024-07-16T22:09:40.406527Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-22047", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-07-16T22:09:40.406Z", "date_only": false, "value": "2024-07-16T22:09:40.406527Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-22047", "record": "FKIE_CVE-2022-22047", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-03T03:00:55.323Z", "date_only": false, "value": "2024-08-03T03:00:55.323Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-22047", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:32:38.073Z", "date_only": false, "value": "2024-12-24T20:32:38.073160Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971673", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "6f4eb5af-e96f-42f6-936e-0c0a035a19f1", "url": "https://feedsin.space/feed/CISAKevBot/items/2971673"}, {"timestamp": "2025-02-23T02:10:34Z", "date_only": false, "value": "2025-02-23T02:10:34.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "c869e043-cf5c-4965-95a3-4f5ab07dc863"}, {"timestamp": "2025-07-08T15:35:53.959Z", "date_only": false, "value": "2025-07-08T15:35:53.959Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-22047", "record": "MSRC_CVE-2022-22047", "field": "document.tracking.generator.date"}, {"timestamp": "2025-07-08T15:36:23.318Z", "date_only": false, "value": "2025-07-08T15:36:23.318Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2022-22047", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:38.451Z", "date_only": false, "value": "2025-10-21T23:15:38.451Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-22047", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:38.451Z", "date_only": false, "value": "2025-10-21T23:15:38.451Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-22047", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:33Z", "date_only": false, "value": "2025-10-22T00:32:33Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P4J8-4HV2-8733", "record": "GHSA-P4J8-4HV2-8733", "field": "modified"}, {"timestamp": "2026-02-02T12:27:18.478Z", "date_only": false, "value": "2026-02-02T12:27:18.478446Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6e240e00-7499-46a9-bc7a-1285564f302f", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "531b9f1f-8061-4823-b17c-89a1c1eaa080", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6e240e00-7499-46a9-bc7a-1285564f302f"}, {"timestamp": "2026-02-02T12:27:18.478Z", "date_only": false, "value": "2026-02-02T12:27:18.478446Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6e240e00-7499-46a9-bc7a-1285564f302f", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "d0f99b02-ce73-4293-948d-2fa6ac785e07", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6e240e00-7499-46a9-bc7a-1285564f302f"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-22047", "field": "timestamps.recorded_at", "uuid": "20eb664f-66c9-420a-806b-0fb942f2ca73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T04:27:33.870Z", "date_only": false, "value": "2026-06-17T04:27:33.870", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-22047", "record": "FKIE_CVE-2022-22047", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:06.984Z", "date_only": false, "value": "2026-06-19T12:47:06.984475Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6d439a2d-e50f-4517-ac59-22768fd99026", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "d2375136-d252-4e07-8206-8ed0731e0a01", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6d439a2d-e50f-4517-ac59-22768fd99026"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-22047", "field": "timestamps.recorded_at", "uuid": "c2d5e831-8453-451b-9b06-a163ce0c2a37", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:58.319Z", "date_only": false, "value": "2026-06-23T11:13:58.319244Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c2d5e831-8453-451b-9b06-a163ce0c2a37", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "1fa7be5c-3497-4f3c-ae45-690c3dc9f83b", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c2d5e831-8453-451b-9b06-a163ce0c2a37"}, {"timestamp": "2026-06-23T14:05:30.428Z", "date_only": false, "value": "2026-06-23T14:05:30.428783Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a3338ba7-5b25-47cf-986a-78a2840f5356", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "3a77fdd4-fc95-470c-aa85-d36a8ceeb4b9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a3338ba7-5b25-47cf-986a-78a2840f5356"}, {"timestamp": "2026-07-26T02:02:51.701Z", "date_only": false, "value": "2026-07-26T02:02:51.701187Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/446", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "e79b5597-f7cd-4bce-8765-59f652894409", "url": "https://t.me/EchelonEyes/446"}, {"timestamp": "2026-07-27T00:01:21.514Z", "date_only": false, "value": "2026-07-27T00:01:21.514516Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/446", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "0daeb85b-25bd-416a-9ed7-5913d69f2dc6", "url": "https://t.me/EchelonEyes/446"}, {"timestamp": "2026-07-28T13:00:04.994Z", "date_only": false, "value": "2026-07-28T13:00:04.994436Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/446", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "ab99314a-31ef-481b-a439-27be4851f928", "url": "https://t.me/EchelonEyes/446"}, {"timestamp": "2026-07-29T00:00:37.077Z", "date_only": false, "value": "2026-07-29T00:00:37.077733Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/446", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "b72e6006-eeb7-4e66-8963-090e0ac47b89", "url": "https://t.me/EchelonEyes/446"}, {"timestamp": "2026-07-29T12:03:12.053Z", "date_only": false, "value": "2026-07-29T12:03:12.053108Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/1703", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "ff2ffa4e-97b9-41bb-a6cf-0b611dc90df0", "url": "https://t.me/cisoclub/1703"}, {"timestamp": "2026-07-30T00:02:58.942Z", "date_only": false, "value": "2026-07-30T00:02:58.942464Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/1703", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "691ecdb8-057c-45aa-949a-e2e1ee0deb95", "url": "https://t.me/cisoclub/1703"}, {"timestamp": "2026-08-03T22:00:06.096Z", "date_only": false, "value": "2026-08-03T22:00:06.096112Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/1703", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "8330ed6d-ebeb-4ac9-9b44-a6d3c72e1d11", "url": "https://t.me/cisoclub/1703"}, {"timestamp": "2026-08-04T00:00:12.417Z", "date_only": false, "value": "2026-08-04T00:00:12.417474Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cisoclub/1703", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "cc02936a-1050-4bb8-94fa-fd1b0ac2a57d", "url": "https://t.me/cisoclub/1703"}, {"timestamp": "2026-09-01T20:01:33.929Z", "date_only": false, "value": "2026-09-01T20:01:33.929787Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/63364", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "b952d71c-27fa-4f98-9cd1-79bfc8239c47", "url": "https://t.me/hacking_Attack/63364"}, {"timestamp": "2026-09-01T20:01:34.863Z", "date_only": false, "value": "2026-09-01T20:01:34.863338Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/61379", "record": "CVE-2022-22047", "field": "creation_timestamp", "uuid": "66cc21d9-0639-4055-9f31-ca519bce2521", "url": "https://t.me/hacking_Attack/61379"}]}