VulnerabilitycriticalExploited in the wild

Microsoft Patch Tuesday updates fix 6 actively exploited zero

Security Affairsby @securityaffairsNov 9, 2022 · 11:54 UTC (Nov 9, 2022)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-41028 CVE-2022-41040 CVE-2022-41128 CVE-2022-41091 CVE-2022-41073 CVE-2022-41125 CVE-2022-41082

Tags: cve-2022-41028 cve-2022-41040 cve-2022-41128 cve-2022-41091 cve-2022-41073 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-41028	Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020	7.2	2%	PoC	Jan 26, 2023
CVE-2022-41040 +1 related CVE CVE-2022-41082	Server-Side Request Forgery in Microsoft Exchange Server (ProxyNotShell)	8.8 group max	100%	KEVRansomwarePoC	Oct 3, 2022 KEV Sep 30, 2022
CVE-2022-41128 +3 related CVEs CVE-2022-41125 CVE-2022-41073 CVE-2022-41091	Out-of-bounds Write RCE in Microsoft Windows JScript9 Scripting Engine	8.8 group max	25%	KEV	Nov 9, 2022 KEV Nov 8, 2022

From the original article

2 min read at securityaffairs.com

Microsoft Patch Tuesday updates for November 2022 addressed 64 vulnerabilities, including six actively exploited zero-days.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.