VulnerabilitycriticalExploited in the wild

Patch Tuesday, November 2022 Election Edition

Krebs on SecurityNov 9, 2022 · 06:55 UTC (Nov 9, 2022)3 min read2 · 1 read

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-41128 CVE-2022-41073 CVE-2022-41125 CVE-2022-41091 CVE-2022-41040 CVE-2022-41082 CVE-2022-41080

Tags: cve-2022-41128 cve-2022-41073 cve-2022-41125 cve-2022-41091 cve-2022-41040 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-41040 +1 related CVE CVE-2022-41082	Server-Side Request Forgery in Microsoft Exchange Server (ProxyNotShell)	8.8 group max	100%	KEVRansomwarePoC	Oct 3, 2022 KEV Sep 30, 2022
CVE-2022-41128 +3 related CVEs CVE-2022-41125 CVE-2022-41073 CVE-2022-41091	Out-of-bounds Write RCE in Microsoft Windows JScript9 Scripting Engine	8.8 group max	25%	KEV	Nov 9, 2022 KEV Nov 8, 2022
CVE-2022-41080	Microsoft Exchange Server Privilege Escalation Exploited in Ransomware Campaigns	8.8	77%	KEVRansomware	Nov 9, 2022 KEV Jan 10, 2023

From the original article

3 min read at krebsonsecurity.com

Let’s face it: Having “2022 election” in the headline above is probably the only reason anyone might read this story today. Still, while most of us here in the United States are anxiously awaiting the results of how well we’ve patched our Democracy, it seems fitting that Microsoft Corp. today released gobs of security patches for its ubiquitous Windows operating systems.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.