By michele654 on Tuesday, 11 October 2022
Category: Vulnerabilities

New Vulnerabilities Tuesday 11 October - Part 2


Monthly Patches are out for Microsoft.

Microsoft Exploit

Monthly Patches have been published, with 96 vulnerabilities. 13 patches are rated as Critical, 71 as Important and 1 as Moderate. There is no patch for the current Exchange vulnerability. One vulnerability, a Windows COM+ Event System Service Elevation of Privilege Vulnerability, is already being exploited. A Microsoft Office Information Disclosure Vulnerability, was made public before the patch was released. Highest CVSSv3 score of 10.
More info. And here. And here.

A vulnerability exists affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unauthenticated remote attacker to gain administrative control over the Kubernetes cluster. CVSSv3 score of 10.
More info.

Security Wizardry Cyber Threat Intelligence - The Radar Page

Security Wizardry Cyber Threat Intelligence - The Mobile Radar Page

SecurityWizardry.com - Vulnerability Details

Leave Comments