Microsoft Patch Tuesday Fixes New Windows Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-37968 | Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters | 10.0 | 3% | ||
| CVE-2022-37976 | Active Directory Certificate Services Elevation of Privilege Vulnerability | 8.8 | 2% | ||
CVE-2022-38034+2 related CVEs | Windows Workstation Service Elevation of Privilege Vulnerability | 8.8 group max | 3% | ||
| CVE-2022-38028 | Local Privilege Escalation in Microsoft Windows Print Spooler (CVE-2022-38028) | 7.8 | 15% | KEV | KEV |
| CVE-2022-41033 | Local Privilege Escalation in Microsoft Windows COM+ Event System Service | 7.8 | 2% | KEV | KEV |
| CVE-2022-41043 | Microsoft Office Information Disclosure Vulnerability | 3.3 | <1% |
From the original article
2 min read at thehackernews.com
Microsoft's Patch Tuesday update for the month of October has addressed a total of 85 security vulnerabilities , including fixes for an actively exploited zero-day flaw in the wild. Of the 85 bugs, 15 are rated Critical, 69 are rated Important, and one is rated Moderate in severity. The update, however, does not include mitigations for the actively exploited ProxyNotShell flaws in Exchange Server .
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.