Vulnerabilitycritical

November 2022 Patch Tuesday forecast: Wrapping up loose ends?

Help Net Securityby @helpnetsecurityDec 9, 2022 · 06:16 UTC (Dec 9, 2022)4 min read2 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-3602 CVE-2022-3786 CVE-2014-0160 CVE-2022-41040 CVE-2022-41082

Tags: cve-2022-3602 cve-2022-3786 cve-2014-0160 cve-2022-41040 cve-2022-41082 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2014-0160	Heartbleed: unauthenticated memory disclosure in OpenSSL TLS/DTLS heartbeat handling	—	100%	KEV	— KEV May 4, 2022
CVE-2022-3786 +1 related CVE CVE-2022-3602	A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking	7.5	92%		Nov 1, 2022
CVE-2022-41040 +1 related CVE CVE-2022-41082	Server-Side Request Forgery in Microsoft Exchange Server (ProxyNotShell)	8.8 group max	100%	KEVRansomwarePoC	Oct 3, 2022 KEV Sep 30, 2022

From the original article

4 min read at helpnetsecurity.com

October 2022 Patch Tuesday was a little unusual last month, as it ‘kind of’ repeated itself the following week. Microsoft turned around and released a series of non-security updates that fixed some discovered connections issues – forcing many to conduct another unplanned patch cycle. They also left several zero-day vulnerabilities unresolved keeping us wondering when these open items will be resolved.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.