# Microsoft April 2022 patches include actively exploited CVE

Published: 2022-04-12 · Severity: elevated
Canonical: https://vorant.io/reports/a1eb8216-d6fb-5aab-bc37-8f91bb8e55d7/microsoft-april-2022-patches-include-actively-exploited-cve

> Microsoft released April 2022 patches; CVE-2022-24521 is confirmed exploited in the wild and requires immediate patching.

On 13 April 2022 (Japan time), Microsoft published security patches addressing multiple vulnerabilities in Microsoft products. The IPA (Information-technology Promotion Agency, Japan) advisory warns that exploitation of these flaws could result in application crashes, system compromise, and data theft. Most critically, CVE-2022-24521 is confirmed by Microsoft to be actively exploited in the wild, triggering an urgent mitigation recommendation. The IPA advises immediate application of available patches via Windows Update to prevent further compromise. Individual environment-specific questions should be directed to the product vendor rather than IPA.

## Mentioned in this report

- Vulnerabilities: CVE-2022-24521 (KEV)

Source reporting: https://www.ipa.go.jp/archive/security/security-alert/2022/20220413-ms.html

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/a1eb8216-d6fb-5aab-bc37-8f91bb8e55d7/microsoft-april-2022-patches-include-actively-exploited-cve.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup