Two Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-41076 | PowerShell Remote Code Execution Vulnerability | 8.5 | 61% | ||
| CVE-2022-44693 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | 2% | ||
| CVE-2022-44698 | SmartScreen Security Feature Bypass in Windows 10/11 and Windows Server | 5.4 | 75% | KEVRansomware | KEV |
| CVE-2022-44710 | DirectX Graphics Kernel Elevation of Privilege Vulnerability | 7.8 | <1% |
From the original article
2 min read at infosecurity-magazine.com
The final Microsoft Patch Tuesday of 2022 addressed nearly a half century of vulnerabilities including two zero-days, one of which is being exploited in the wild. A handful of the bugs are rated “critical” while 13 are described by Microsoft as “more likely to be exploited,” meaning there’s still plenty of work to do for sysadmins at the end of the year.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.