Vulnerabilitycritical
Microsoft Patch Tuesday for October 2022 — Snort rules and prominent vulnerabilities
- CVEs
- CVE-2022-41038CVE-2022-37968CVE-2022-37976CVE-2022-37979CVE-2022-22035CVE-2022-24504CVE-2022-30198CVE-2022-33634CVE-2022-38000CVE-2022-38047CVE-2022-41081CVE-2022-38048CVE-2022-38049CVE-2022-41031CVE-2022-3304CVE-2022-3307CVE-2022-3308CVE-2022-3310CVE-2022-3311CVE-2022-3313CVE-2022-3315CVE-2022-3316CVE-2022-3317CVE-2022-3370CVE-2022-3373CVE-2022-41035
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-41081 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 group max | 2% | ||
| CVE-2022-3370 | Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… | 8.8 group max | <1% | ||
| CVE-2022-37968 | Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters | 10.0 | 3% | ||
| CVE-2022-37976 | Active Directory Certificate Services Elevation of Privilege Vulnerability | 8.8 | 2% | ||
CVE-2022-38048+2 related CVEs | Microsoft Office Remote Code Execution Vulnerability | 7.8 | 2% | ||
| CVE-2022-41035 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 5.3 | 1% | ||
| CVE-2022-41038 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | 3% |
From the original article
2 min read at blog.talosintelligence.com
Microsoft released its monthly security update Tuesday, disclosing 83 vulnerabilities across the company’s hardware and software line, including seven critical issues in Windows’ point-to-point tunneling protocol. October's security update features 11 critical vulnerabilities, with the remainder being “important.”
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.