Microsoft Patch Tuesday for November 2022 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2022-37966+1 related CVE | Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability | 8.1 group max | 3% | ||
CVE-2022-41039+4 related CVEs | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | 8.1 group max | 1% | ||
CVE-2022-41125+2 related CVEs | Local Privilege Escalation in Microsoft Windows CNG Key Isolation Service | 7.8 group max | 3% | KEV | KEV |
| CVE-2022-41080 | Microsoft Exchange Server Privilege Escalation Exploited in Ransomware Campaigns | 8.8 | 77% | KEVRansomware | KEV |
| CVE-2022-41106 | Microsoft Excel Remote Code Execution Vulnerability | 8.8 | 2% |
From the original article
3 min read at blog.talosintelligence.com
Microsoft released its monthly security update on Tuesday, disclosing 62 vulnerabilities. Of these vulnerabilities, 8 are classified as “Critical” and the rest are classified as “Important.” Three of the critical entries are remote code execution (RCE) vulnerabilities for Windows Point-to-Point Tunneling Protocol (PPTP).
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.