Microsoft Patch Tuesday for October 2022 — Snort rules and prominent vulnerabilities
Summary: Microsoft's October 2022 security update disclosed 83 vulnerabilities across its hardware and software, 11 of them critical, including seven critical flaws in Windows' point-to-point tunneling protocol. The most severe was CVE-2022-37968 in Azure Arc Connect, rated 10 out of 10, which could let an unauthenticated user elevate to cluster admin on Azure Arc-enabled Kubernetes clusters.
Key Takeaway: A maximum-severity, unauthenticated elevation flaw in Azure Arc Connect means anyone who can reach the cluster connect feature could take control of the Kubernetes cluster itself, and Microsoft rates the SharePoint RCE CVE-2022-41038 as more likely to be exploited.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-37968CVE-2022-37976CVE-2022-37979CVE-2022-38000CVE-2022-41038
- Related
- Microsoft Patch Tuesday, October 2022 Edition Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026