Vulnerabilitycritical

December 2022 Patch Tuesday forecast: Fine-tuning the connectivity

Help Net Securityby @helpnetsecurityDec 9, 2022 · 00:00 UTC (Dec 9, 2022)3 min read2

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-37967 CVE-2022-38023 CVE-2022-37966 CVE-2022-4262

Tags: cve-2022-37967 cve-2022-38023 cve-2022-37966 cve-2022-4262 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-37966 +2 related CVEs CVE-2022-38023 CVE-2022-37967	Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability	8.1 group max	3%		Nov 9, 2022
CVE-2022-4262	Type Confusion in Google Chrome V8 JavaScript Engine Exploited in the Wild (CVE-2022-4262)	8.8	24%	KEV	Dec 2, 2022 KEV Dec 5, 2022

From the original article

3 min read at helpnetsecurity.com

Microsoft wrapped up a lot of ‘loose ends’ last month with their November set of updates , but there is still some work to do before the end-of-year holiday season. The ProxyNotShell vulnerabilities were finally fixed, and we saw some improvements in the changes made to communication and authentication exchanges.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.