Patch Tuesday, November 2022 Election Edition
Summary: Microsoft's November 2022 Patch Tuesday fixed six zero-day vulnerabilities already being exploited in the wild, including CVE-2022-41128, a critical Windows scripting flaw with a CVSS score of 8.8 that can compromise users who merely browse to a malicious site. The batch also patched CVE-2022-41073 in Windows Print Spooler (the ninth spooler patch in 12 months), CVE-2022-41125 in the CNG Key Isolation Service, CVE-2022-41091 in Windows Mark of the Web, and two Exchange Server flaws, CVE-2022-41040 and CVE-2022-41082, that were reported as exploited in late September 2022 but went unpatched in October.
Key Takeaway: Six zero-days under active exploitation in a single month means the window between disclosure and attack is already closed for anyone who delays; the Exchange flaws in particular sat unpatched for over a month while Microsoft revised mitigation instructions multiple times.