Microsoft Patch Tuesday for September 2022 — Snort rules and prominent vulnerabilities
Summary: Microsoft's September 2022 Patch Tuesday disclosed 64 vulnerabilities across its hardware and software, including five critical issues, two moderate and one low-severity flaw already patched in a Google Chromium update. The most serious, CVE-2022-34718, scores 9.8 and allows remote code execution via a single specially crafted IPv6 packet sent to a Windows node with IPSec enabled, while CVE-2022-37969 is being actively exploited in the wild to gain SYSTEM-level privileges through the Windows Common Log File System Driver.
What you should know: One of the 64 flaws is already circulating in the wild and yields SYSTEM privileges on the Windows Common Log File System Driver, and Microsoft rates CVE-2022-34718 as more likely to be exploited at a 9.8 severity score.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-34700CVE-2022-34718CVE-2022-34721CVE-2022-34722CVE-2022-35805CVE-2022-37969
- Related
- Wormable Flaw, 0days Lead Sept. 2022 Patch Tuesday Cyber Risks ·CVE-2022-37969: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Sep 14, 2022