Microsoft Patch Tuesday — December 2022

Tuesday, 13 December 2022

Vulnerabilities: 51
Critical: 0
High: 41
Zero-days: 1
Public exploit: 1

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

Medium 5.4
CVE-2022-44698 Zero-day Windows SmartScreen Security Feature Bypass Vulnerability
EPSS 75%

Public exploit code 1

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 7.8
CVE-2022-44666 Public exploit Windows Contacts Remote Code Execution Vulnerability
EPSS 41%

All vulnerabilities 51

High41 Show

High 8.8
CVE-2022-44690 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 82%
High 8.8
CVE-2022-44693 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 2.1%
High 8.5
CVE-2022-41076 PowerShell Remote Code Execution Vulnerability
EPSS 61%
High 8.5
CVE-2022-41127 Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability
EPSS 1.7%
High 8.3
CVE-2022-44708 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
EPSS 2%
High 8.1
CVE-2022-44670 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
EPSS 1.2%
High 8.1
CVE-2022-44676 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
EPSS 1.2%
High 7.8
CVE-2022-44666 Public exploit Windows Contacts Remote Code Execution Vulnerability
EPSS 41%
High 7.8
CVE-2022-26804 Microsoft Office Graphics Remote Code Execution Vulnerability
High 7.8
CVE-2022-26805 Microsoft Office Graphics Remote Code Execution Vulnerability
High 7.8
CVE-2022-26806 Microsoft Office Graphics Remote Code Execution Vulnerability
High 7.8
CVE-2022-41077 Windows Fax Compose Form Elevation of Privilege Vulnerability
High 7.8
CVE-2022-41089 .NET Framework Remote Code Execution Vulnerability
EPSS 1.2%
High 7.8
CVE-2022-41094 Windows Hyper-V Elevation of Privilege Vulnerability
High 7.8
CVE-2022-41121 Windows Graphics Component Elevation of Privilege Vulnerability
EPSS 1.1%
High 7.8
CVE-2022-44667 Windows Media Remote Code Execution Vulnerability
High 7.8
CVE-2022-44668 Windows Media Remote Code Execution Vulnerability
High 7.8
CVE-2022-44671 Windows Graphics Component Elevation of Privilege Vulnerability
High 7.8
CVE-2022-44675 Windows Bluetooth Driver Elevation of Privilege Vulnerability
EPSS 5%
High 7.8
CVE-2022-44677 Windows Projected File System Elevation of Privilege Vulnerability
High 7.8
CVE-2022-44678 Windows Print Spooler Elevation of Privilege Vulnerability
High 7.8
CVE-2022-44680 Windows Graphics Component Elevation of Privilege Vulnerability
High 7.8
CVE-2022-44681 Windows Print Spooler Elevation of Privilege Vulnerability
High 7.8
CVE-2022-44683 Windows Kernel Elevation of Privilege Vulnerability
EPSS 8.2%
High 7.8
CVE-2022-44687 Raw Image Extension Remote Code Execution Vulnerability
High 7.8
CVE-2022-44689 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2022-44691 Microsoft Office OneNote Remote Code Execution Vulnerability
High 7.8
CVE-2022-44692 Microsoft Office Graphics Remote Code Execution Vulnerability
High 7.8
CVE-2022-44694 Microsoft Office Visio Remote Code Execution Vulnerability
High 7.8
CVE-2022-44695 Microsoft Office Visio Remote Code Execution Vulnerability
High 7.8
CVE-2022-44696 Microsoft Office Visio Remote Code Execution Vulnerability
High 7.8
CVE-2022-44697 Windows Graphics Component Elevation of Privilege Vulnerability
High 7.8
CVE-2022-44702 Windows Terminal Remote Code Execution Vulnerability
EPSS 1.4%
High 7.8
CVE-2022-44704 Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability
High 7.8
CVE-2022-44710 DirectX Graphics Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2022-47211 Microsoft Office Graphics Remote Code Execution Vulnerability
High 7.8
CVE-2022-47212 Microsoft Office Graphics Remote Code Execution Vulnerability
High 7.8
CVE-2022-47213 Microsoft Office Graphics Remote Code Execution Vulnerability
High 7.5
CVE-2022-44713 Microsoft Outlook for Mac Spoofing Vulnerability
EPSS 1.6%
High 7.0
CVE-2022-44669 Windows Error Reporting Elevation of Privilege Vulnerability
High 7.0
CVE-2022-44673 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
EPSS 5.2%

Medium10 Show

Medium 5.4
CVE-2022-44698 Zero-day Windows SmartScreen Security Feature Bypass Vulnerability
EPSS 75%
Medium 6.8
CVE-2022-44682 Windows Hyper-V Denial of Service Vulnerability
Medium 6.6
CVE-2022-41115 Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability
EPSS 2.1%
Medium 6.5
CVE-2022-44679 Windows Graphics Component Information Disclosure Vulnerability
Medium 6.5
CVE-2022-44707 Windows Kernel Denial of Service Vulnerability
EPSS 2.7%
Medium 6.3
CVE-2022-24480 Outlook for Android Elevation of Privilege Vulnerability
Medium 5.5
CVE-2022-41074 Windows Graphics Component Information Disclosure Vulnerability
Medium 5.5
CVE-2022-44674 Windows Bluetooth Driver Information Disclosure Vulnerability
Medium 5.5
CVE-2022-44699 Azure Network Watcher Agent Security Feature Bypass Vulnerability
Medium 4.3
CVE-2022-44688 Microsoft Edge (Chromium-based) Spoofing Vulnerability
EPSS 1.2%