Exploit / PoCcriticalExploited in the wild

Microsoft patches Windows flaw exploited in the wild (CVE-2022-41033)

Help Net Securityby @zeljkazorzNov 8, 2022 · 17:57 UTC (Nov 8, 2022)2 min read2

Read at helpnetsecurity.com

Analyze CVE-2022-41033 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-41033 CVE-2022-41040 CVE-2022-41082 CVE-2022-37968 CVE-2022-38048 CVE-2022-41036 CVE-2022-41037 CVE-2022-38053 CVE-2022-41038

Tags: cve-2022-41033 cve-2022-41040 cve-2022-41082 cve-2022-37968 cve-2022-38048 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-37968	Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters	10.0	3%		Oct 11, 2022
CVE-2022-38048	Microsoft Office Remote Code Execution Vulnerability	7.8	2%		Oct 11, 2022
CVE-2022-38053 +3 related CVEs CVE-2022-41038 CVE-2022-41036 CVE-2022-41037	Microsoft SharePoint Server Remote Code Execution Vulnerability	8.8	76%		Oct 11, 2022
CVE-2022-41033	Local Privilege Escalation in Microsoft Windows COM+ Event System Service	7.8	2%	KEV	Oct 11, 2022 KEV Oct 11, 2022
CVE-2022-41040 +1 related CVE CVE-2022-41082	Server-Side Request Forgery in Microsoft Exchange Server (ProxyNotShell)	8.8 group max	100%	KEVRansomwarePoC	Oct 3, 2022 KEV Sep 30, 2022

From the original article

2 min read at helpnetsecurity.com

October 2022 Patch Tuesday is here, with fixes for 85 CVE-numbered vulnerabilities, including CVE-2022-41033, a vulnerability in Windows COM+ Event System Service that has been found being exploited in the wild.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.