Microsoft Patch Tuesday for November 2022 — Snort rules and prominent vulnerabilities

Summary: Microsoft's November 2022 security update disclosed 62 vulnerabilities, 8 classified Critical and the rest Important, including three remote code execution flaws in Windows Point-to-Point Tunneling Protocol that require an unauthenticated attacker to win a complex race condition. Microsoft rated exploitation more likely for the JScript9 and Chakra RCE CVE-2022-41118, the Kerberos privilege escalation CVE-2022-37967, and the Exchange Server elevation of privilege CVE-2022-41080, and listed three Important vulnerabilities as exploited in the wild.
Why it matters: Three of the flaws in this release were already being exploited in the wild, and the Exchange Server elevation of privilege CVE-2022-41080 carries low attack complexity with exploitation rated more likely - a combination that puts unpatched mail servers in the path of attackers who do not need to win a race condition to get in.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2022-37966 CVE-2022-37967 CVE-2022-38015 CVE-2022-41080 CVE-2022-41106 CVE-2022-41118
Related: CVE-2022-41080: Microsoft Exchange Server Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Jan 10, 2023
Vulnerability Spotlight: Microsoft Office class attribute double-free vulnerability Cyber Risks ·
Patch Tuesday, November 2022 Election Edition Cyber Risks ·