November 2022 Patch Tuesday | Microsoft Releases 65 New Vulnerabilities With 10 Critical; Adobe Releases Zero Advisories (for the First Time in Six Years). | Qualys
Summary: Microsoft's November 2022 Patch Tuesday fixed 65 new vulnerabilities, ten of them critical and allowing denial of service, elevation of privilege, and remote code execution, and addressed six known exploited zero-day flaws. Adobe released no advisories at all that month, the first time in six years it had no fixes.
What's compelling: Six of the flaws Microsoft patched were already being exploited in the wild, and the ProxyNotShell Exchange vulnerabilities (CVE-2022-41040, CVE-2022-41082) finally received patches after weeks of mitigation-only guidance. The November 8 updates also introduced a known Kerberos authentication failure on domain controllers, requiring out-of-band fixes released from November 17.
Read the original at Qualys Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-3602CVE-2022-3786CVE-2022-41040CVE-2022-41082
- Related
- Microsoft: Two New 0-Day Flaws in Exchange Server Cyber Risks ·Patch Tuesday, November 2022 Election Edition Cyber Risks ·