Weekly briefing

Week 47 · 21 Nov – 27 Nov 2022 UTC · assess the changes, then plan the next dates.

What to assess first

21 Nov – 27 Nov · dates to 27 Dec Check coverage

Coming up2

9Dec
CISA KEV deadlineDue 9 Dec 2022
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
CVE-2022-41049
Same day: CISA KEV deadline: Microsoft Windows Print Spooler Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability; CISA KEV deadline: Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Scripting Languages Remote Code Execution Vulnerability
13Dec
Patch TuesdayScheduled for 13 Dec 2022
Patch Tuesday, 13 December 2022
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

How this list is chosen

Changes from 21 Nov 2022 – 27 Nov 2022 UTC and dates due up to 27 Dec 2022. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.