Exploit / PoCcritical

Microsoft fixes exploited zero-day, revokes certificate used to sign malicious drivers (CVE-2022-44698)

Help Net Securityby @zeljkazorzDec 13, 2022 · 00:00 UTC (Dec 13, 2022)3 min read1

Read at helpnetsecurity.com

Analyze CVE-2022-44698 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-44698 CVE-2022-41076 CVE-2022-44713 CVE-2022-44690 CVE-2022-44693

Tags: cve-2022-44698 cve-2022-41076 cve-2022-44713 cve-2022-44690 cve-2022-44693 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-41076	PowerShell Remote Code Execution Vulnerability	8.5	61%		Dec 13, 2022
CVE-2022-44690 +1 related CVE CVE-2022-44693	Microsoft SharePoint Server Remote Code Execution Vulnerability	8.8	82%		Dec 13, 2022
CVE-2022-44698	SmartScreen Security Feature Bypass in Windows 10/11 and Windows Server	5.4	76%	KEVRansomware	Dec 13, 2022 KEV Dec 13, 2022
CVE-2022-44713	Microsoft Outlook for Mac Spoofing Vulnerability	7.5	1%		Dec 13, 2022

From the original article

3 min read at helpnetsecurity.com

It’s December 2022 Patch Tuesday, and Microsoft has delivered fixes for 50+ vulnerabilities, including a Windows SmartScreen bypass flaw (CVE-2022-44698) exploited by attackers to deliver a variety of malware. CVE-2022-44698 affects all Windows OS versions starting from Windows 7 and Windows Server 2008 R2. “ The vulnerability has low complexity.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.