VulnerabilitycriticalExploited in the wild

Microsoft releases patches for 68 vulnerabilities, including ‘ProxyNotShell’ zero

The RecordDec 21, 2022 · 00:00 UTC (Dec 21, 2022)3 min read3 · 1 read

Read at therecord.media

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-41073 CVE-2020-1337 CVE-2022-41091 CVE-2022-41125 CVE-2022-41128

Tags: cve-2022-41073 cve-2020-1337 cve-2022-41091 cve-2022-41125 cve-2022-41128 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-1337	An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system	7.8	14%	PoC ×2	Aug 17, 2020
CVE-2022-41128 +3 related CVEs CVE-2022-41125 CVE-2022-41073 CVE-2022-41091	Out-of-bounds Write RCE in Microsoft Windows JScript9 Scripting Engine	8.8 group max	25%	KEV	Nov 9, 2022 KEV Nov 8, 2022

From the original article

3 min read at therecord.media

Microsoft on Tuesday released fixes for 68 vulnerabilities – 11 of them critical – including two zero days known together as “ ProxyNotShell ”. Cybersecurity experts told The Record many of the vulnerabilities are currently being exploited in the wild by hackers.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.