Weekly briefing

Week 49 · 5 Dec – 11 Dec 2022 UTC · assess the changes, then plan the next dates.

What to assess first

5 Dec – 11 Dec · dates to 10 Jan Check coverage

Act on1

5Dec
Exploited5 Dec 2022
Google Chromium V8 Type Confusion Vulnerability
CVE-2022-4262

Coming up3

13Dec
Patch TuesdayScheduled for 13 Dec 2022
Patch Tuesday, 13 December 2022
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
3Jan
CISA KEV deadlineDue 3 Jan 2023
Microsoft Defender SmartScreen Security Feature Bypass Vulnerability
CVE-2022-44698
9Dec
CISA KEV deadlineDue 9 Dec 2022
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
CVE-2022-41049
Same day: CISA KEV deadline: Microsoft Windows Print Spooler Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability; CISA KEV deadline: Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

Changed1

11Dec
Security11 Dec 2022
VMSA-2022-0033:VMware ESXi, Workstation, and Fusion updates address a heap out-of-bounds write vulnerability
VMware security advisories (Broadcom)

How this list is chosen

Changes from 5 Dec 2022 – 11 Dec 2022 UTC and dates due up to 10 Jan 2023. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.