Install Latest Windows Update ASAP! Patches Issued for 6 Actively Exploited Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-3723 | Actively Exploited V8 Type Confusion in Google Chrome (CVE-2022-3723) | 8.8 | 8% | KEV | KEV |
CVE-2022-37966+1 related CVE | Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability | 8.1 group max | 3% | ||
CVE-2022-41039+4 related CVEs | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 group max | 1% | ||
CVE-2022-41040+1 related CVE | Server-Side Request Forgery in Microsoft Exchange Server (ProxyNotShell) | 8.8 group max | 100% | KEVRansomwarePoC | KEV |
CVE-2022-41128+4 related CVEs | Out-of-bounds Write RCE in Microsoft Windows JScript9 Scripting Engine | 8.8 group max | 25% | KEV | KEV |
| CVE-2022-41080 | Microsoft Exchange Server Privilege Escalation Exploited in Ransomware Campaigns | 8.8 | 77% | KEVRansomware | KEV |
From the original article
3 min read at thehackernews.com
Microsoft's latest round of monthly security updates has been released with fixes for 68 vulnerabilities spanning its software portfolio, including patches for six actively exploited zero-days. 12 of the issues are rated Critical, two are rated High, and 55 are rated Important in severity. This also includes the weaknesses that were closed out by OpenSSL the previous week.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.