The Microsoft October 2022 security updates fix a large number of vulnerabilities and include a zero-day flaw in the Windows COM+ Event System Service (CVE-2022-41033) that Microsoft lists as exploited. The updates do not cover the ProxyNotShell Exchange Server flaws (CVE-2022-41040 and CVE-2022-41082). Apply the updates as soon as you can.
What did Microsoft fix in the October 2022 security updates?
As part of the October security updates, Microsoft has released updates for a large number of security vulnerabilities, including a 0-day vulnerability known to be actively exploited by threat actors. In addition, it is stated that the published updates do not cover the “ProxyNotShell” vulnerabilities (CVE-2022-41040, CVE-2022-41082) recently detected in Microsoft Exchange Server.
Which vulnerabilities were fixed?
Some of the vulnerabilities fixed by the updates are as follows;
- The vulnerability, tracked as CVE-2022-41033, is caused by a buffer overflow affecting the Windows COM+ Event System Service. The vulnerability, which affects all versions of Windows starting with Windows 7 and Windows Server 2008, allows a local user to execute code with SYSTEM privileges on a vulnerable system.
- The security vulnerability, tracked as CVE-2022-37979, is caused by a Race Condition bug in Windows Hyper-V. A local user can exploit the vulnerability to gain unauthorized access to sensitive information and elevate their privileges in the system.
- The security vulnerability, tracked as CVE-2022-37976, is caused by improper enforcement of security restrictions in Active Directory Certificate Services.
- The vulnerability, tracked as CVE-2022-37978, exists because the security features in Active Directory Certificate Services are bypassed. As a result, a remote user can exploit the vulnerability to perform man-in-the-middle (MitM) attacks and gain access to network communications.
- The vulnerability, tracked as CVE-2022-41043, exists due to excessive data output by Microsoft Office applications. As a result, a local user can gain unauthorized access to sensitive information in the system by exploiting the vulnerability.
Which Microsoft products are affected?
Updates that fix vulnerabilities affect the following Microsoft products and versions;
What should users do?
It is recommended that users using the products and versions mentioned above immediately apply the published updates in order not to be the target of attacks that can be carried out using vulnerabilities.