Skip to main content

MS Patch Tuesday

·307 words·2 mins
Blogger Essential cli patchtuesday python
zd
Author
zd
cli-geek, strategist
Table of Contents

MS Patch Tuesday
#

This is a simple tool (written python) to perfrom quick analysis on security updates for MS Patch Tuesday. It highlights:

  • Products Families
  • Vulnerability Types
  • High severity vulnerabities (>= CVSS 8.5)
  • High likelihood vulnerabilities (contains ‘Exploitation More Likely’)
  • Vulnerabilties that exploited in wild (Exploited:Yes)

Microsoft Security Response Center (MSRC) investigates all reports of security vulnerabilities affecting Microsoft products and services, and provides these updates as part of the ongoing effort to help you manage security risks and help keep your systems protected. All the details from Microsoft security update are formatted according to the Common Vulnerability Reporting Framework (CVRF). For more details, please visit msrc.microsoft.com/update-guide.

Usage
#

$ patch_tuesday -h
usage: patch_tuesday [-h] [-c] [-k <YYYY-mmm>] [-v]

   Zzzzz   |\      _,,,---,,_
           /,`.-'`'    -.  ;-;;,_   __author__ : [ zd ]
          |,4-  ) )-,_..;\ (  `'-'  __year__   : [ 2022.03 ]
         '---''(_/--'  `-'\_)       __file__   : [ /home/xx/admin/patch_tuesday ]

         [ To get vulnerability stats and updates for Patch Tuesday from MSRC. ]


options:
  -h, --help     show this help message and exit
  -c             show chart output
  -k <YYYY-mmm>  Date string for the report query in format YYYY-mmm
  -v             verbose output

Get detailed Microsoft security update, formatted according to the Common Vulnerability Reporting Framework. MSRC investigates all reports of security vulnerabilities affecting Microsoft products and services, and provides these updates as part of the ongoing effort to help you manage security risks and help keep your systems protected. For more details, please visit msrc.microsoft.com/update-guide.

A similar wbesite can be found at https://patchtuesdaydashboard.com (by Morphus Labs).

Get quick summary of MS vulnerability stats for current month.

$ ./patch_tuesday.py

./patch_tuesday.py

Tips
#

Show quick summary with simple ASCII chart.

$ ./patch_tuesday.py -vc -k 2022-apr

./patch_tuesday.py -vc -k 2022-apr

$ ./patch_tuesday -k 2022-may -v

./patch_tuesday.py -k 2022-may -v

$ ./patch_tuesday -k 2022-jun -v

./patch_tuesday.py -k 2022-jun -v

References
#

Related

Multipass
·659 words·4 mins
Blogger cli multipass
Orchestrates virtual Ubuntu instances with Multipass.
Code Bloat
·23 words·1 min
Blogger code qotd
In the golden age of programming …
Think In Graphs
·21 words·1 min
Blogger qotd
Defenders think in lists. Attackers think in graphs.