Microsoft Patch Tuesday for December 2022 — Snort rules and prominent vulnerabilities
Summary: Microsoft's December 2022 security update disclosed 48 vulnerabilities: 6 Critical, 41 Important, and 1 Moderate. Among the Critical flaws Microsoft rates as more likely to be exploited is CVE-2022-41076, a PowerShell remote code execution vulnerability that lets an authenticated attacker escape the PowerShell Remoting Session Configuration, alongside RCE flaws in Dynamics NAV and Dynamics 365 Business Central (CVE-2022-41127), Windows SSTP (CVE-2022-44670 and CVE-2022-44676), and SharePoint Server (CVE-2022-44690 and CVE-2022-44693).
Key Takeaway: Microsoft flags CVE-2022-41076 as more likely to be exploited, and it only requires an attacker who is already authenticated - meaning a single set of valid credentials could be enough to break out of a PowerShell remoting session and run commands on the host.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-41076CVE-2022-41127CVE-2022-44670CVE-2022-44676CVE-2022-44690CVE-2022-44693
- Related
- Microsoft Patch Tuesday, December 2022 Edition Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026