Exploit / PoCcriticalExploited in the wild

Microsoft fixes many zero-days under attack

Help Net Securityby @zeljkazorzNov 8, 2022 · 00:00 UTC (Nov 8, 2022)2 min read2 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-41091 CVE-2022-41049 CVE-2022-41128 CVE-2022-41073 CVE-2022-41125 CVE-2022-38023

Tags: cve-2022-41091 cve-2022-41049 cve-2022-41128 cve-2022-41073 cve-2022-41125 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-38023	Netlogon RPC Elevation of Privilege Vulnerability	8.1	2%		Nov 9, 2022
CVE-2022-41128 +4 related CVEs CVE-2022-41125 CVE-2022-41073 CVE-2022-41049 CVE-2022-41091	Out-of-bounds Write RCE in Microsoft Windows JScript9 Scripting Engine	8.8 group max	25%	KEV	Nov 9, 2022 KEV Nov 8, 2022

From the original article

2 min read at helpnetsecurity.com

November 2022 Patch Tuesday is here, with fixes for many vulnerabilities actively exploited in the wild, including CVE-2022-41091, a Windows Mark of the Web bypass flaw, and the ProxyNotShell MS Exchange vulnerabilities . CVE-2022-41091 is a Windows zero-day vulnerability that allows attackers to bypass the Mark of the Web (MOTW) security feature.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.