Microsoft Patch Tuesday, December 2022 Edition

Summary: Microsoft released its final monthly security batch for 2022, fixing more than four dozen holes across Windows and related software, including six bundles rated critical. The updates address CVE-2022-44698, a SmartScreen Mark of the Web bypass already seeing exploitation, CVE-2022-41076, a remote code execution flaw in PowerShell, and CVE-2022-44710, a publicly disclosed elevation of privilege bug in Windows 11's DirectX component.
Why it matters: Microsoft also confirmed that drivers certified through its Windows Hardware Developer Program were being used maliciously in post-exploitation activity, with Sophos tying the signed-driver activity to the Russian ransomware group Cuba, which has extorted an estimated $60 million from victims since 2019.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2022-41076 CVE-2022-44698 CVE-2022-44710 CVE-2022-44713
Related: CVE-2022-44698: Microsoft Defender Smart Screen Security Feature Bypass Vulnerability Known Exploited Vulnerabilities · Dec 13, 2022
Microsoft Patch Tuesday for December 2022 — Snort rules and prominent vulnerabilities Cyber Risks ·
Fat Patch Tuesday, February 2024 Edition Cyber Risks ·