WEEKLY BRIEFING · 7 NOV – 13 NOV 2022 · UTC
Full source inventory · public sources only
Week 45 sources
MSRC published November 2022 Security Updates. CISA added 4 Microsoft CVEs to its Known Exploited Vulnerabilities catalog.
1MSRC release note
4Microsoft CVEs added to CISA KEV
Security to act on4
- CVE-2022-41128 — Microsoft Windows Scripting Languages Remote Code Execution VulnerabilityKEV 8 Nov
- CVE-2022-41125 — Microsoft Windows CNG Key Isolation Service Privilege Escalation VulnerabilityKEV 8 Nov
- CVE-2022-41091 — Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass VulnerabilityKEV 8 Nov
- CVE-2022-41073 — Microsoft Windows Print Spooler Privilege Escalation VulnerabilityKEV 8 Nov
MSRC security releases1
Every line opens its detail page or the original Microsoft source. This briefing uses public sources only and says nothing about your tenant or devices.