Microsoft Patch Tuesday – November 2022

Patch Tuesday is once again upon us. The November 2022 edition of Patch Tuesday brings us 82 fixes, with 10 rated as critical. We’ve listed the most important changes below.

⚡ TL;DR | Go Straight to the November 2022 Patch Tuesday Audit Report

Microsoft Exchange Server Vulnerabilities

Exchange is back on the menu this month. CVE-2022-41080 is the most severe of the six Exchange vulnerabilities fixed. It got a CVSS base score of 8.8 and has been identified to be the most likely out of the Exchange vulnerabilities to be exploited.

In addition, there are another five Exchange server vulnerabilities that got fixed with slightly lower CVSS scores (7.8-8.8).

• CVE-2022-41123
• CVE-2022-41082
• CVE-2022-41079
• CVE-2022-41078
• CVE-2022-41040

The last few months Exchange has seen a flurry of vulnerabilities get disclosed and fixed, quickly becoming one of the most watched items by IT administrators when Microsoft publishes its monthly patches.

Windows Scripting Languages RCE

The most severe vulnerability this month is a remote code execution in the Windows Scripting Languages, specifically the JScript9 scripting language. While it doesn’t have the highest CVSS score at 8.8, Microsoft has shared that this CVE-2022-41128 has been exploited already. For a successful exploitation, an attacker would need to entice a user to visit a specific server share or website.

A second vulnerability in JScript9 and Chakra scripting has also been fixed. CVE-2022-41118 received a CVSS base score of 7.5 and isn’t as critical since no exploit has been detected.

Run the Patch Tuesday November 2022 Audit

To help manage your update progress, we’ve created the Patch Tuesday Audit that checks if the assets in your network are on the latest patch updates. The report has been color-coded to see which machines are up-to-date and which ones still need to be updated. As always, system administrators are urged to update their environment as soon as possible to ensure all endpoints are secured.

The Lansweeper Patch Tuesday report is automatically added to Lansweeper Cloud sites. Lansweeper Cloud is included in all our licenses without any additional cost and allows you to federate all your installations into one single view so all you need to do is look at one report, automatically added every patch Tuesday!

Patch Tuesday November 2022 CVE Codes & Titles

Receive the Latest Patch Tuesday Report for FREE Every Month

"*" señala los campos obligatorios

Email*

This field is hidden when viewing the form

EmailType

This field is hidden when viewing the form

IM – Conv Page – Processing

This field is hidden when viewing the form

IM – UTM_Campaign FC – Processing

This field is hidden when viewing the form

IM – UTM_Campaign LC – Processing

This field is hidden when viewing the form

IM – UTM_Content FC – Processing

This field is hidden when viewing the form

IM – UTM_Content LC – Processing

This field is hidden when viewing the form

IM – UTM_Medium FC – Processing

This field is hidden when viewing the form

IM – UTM_Medium LC – Processing

This field is hidden when viewing the form

IM – UTM_Source FC – Processing

This field is hidden when viewing the form

IM – UTM_Source LC – Processing

This field is hidden when viewing the form

IM – UTM_Term FC – Processing

This field is hidden when viewing the form

IM – UTM_Term LC – Processing

This field is hidden when viewing the form

gclid

This field is hidden when viewing the form

msclkid

Comments

Este campo es un campo de validación y debe quedar sin cambios.

Count Me In Submit