Microsoft · Security update · November 8, 2022

KB5020023: November 2022 security update

KB5020023, released November 8, 2022, fixes 24 CVEs across 5 products. 3 of them are being exploited (CVE-2022-41128); 3 on CISA KEV. Patch Radar priority: Patch now.

Patch now3 on CISA KEVKnown ransomware use
CVEs closed
24
5 rated Critical
Exploited
3
CVE-2022-41128
Exploitation more likely
5
Vendor assessment
Highest EPSS
0.2462
97th percentile

Priority of the 24 CVEs

Patch now 3 Urgent 8 High 9 Routine 4

Applies to

Product
Windows 8.1 for 32-bit systems
Windows 8.1 for x64-based systems
Windows RT 8.1
Windows Server 2012 R2
Windows Server 2012 R2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2022-41128 Windows Scripting Remote Code Execution 8.8 0.2462 KEVExploited
Patch now CVE-2022-41125 Windows CNG Key Isolation Service Elevation of Privilege 7.8 0.0305 KEVExploited
Patch now CVE-2022-41073 Windows Print Spooler Components Elevation of Privilege 7.8 0.0236 KEVRansomwareExploited
Urgent CVE-2022-41109 Windows Win32K Elevation of Privilege 7.8 0.0812 More likely
Urgent CVE-2022-41058 Windows Network Address Translation (NAT) Denial of Service 7.5 0.0213 More likely
Urgent CVE-2022-41118 Windows Scripting Remote Code Execution 7.5 0.0118 More likely
Urgent CVE-2022-41057 Windows HTTP.sys Elevation of Privilege 7.8 0.0114 More likely
Urgent CVE-2022-41039 Windows Point-to-Point Tunneling Protocol Remote Code Execution 8.1 0.0114 Exploitation Less Likely
Urgent CVE-2022-41090 Windows Point-to-Point Tunneling Protocol Denial of Service 5.9 0.0108 More likely
Urgent CVE-2022-41088 Windows Point-to-Point Tunneling Protocol Remote Code Execution 8.1 0.0103 Exploitation Less Likely
Urgent CVE-2023-21712 Windows Point-to-Point Tunneling Protocol Remote Code Execution 8.1 0.0099 Exploitation Unlikely
High CVE-2022-41056 Network Policy Server (NPS) Denial of Service 7.5 0.0213 Exploitation Less Likely
High CVE-2022-41053 Windows Kerberos Denial of Service 7.5 0.0211 Exploitation Less Likely
High CVE-2022-41047 Windows ODBC Driver Remote Code Execution 8.8 0.0160 Exploitation Less Likely
High CVE-2022-41048 Windows ODBC Driver Remote Code Execution 8.8 0.0160 Exploitation Less Likely
High CVE-2022-37992 Windows Group Policy Preference Client Elevation of Privilege 7.8 0.0053 Exploitation Less Likely
High CVE-2022-41095 Windows Digital Media Elevation of Privilege 7.8 0.0052 Exploitation Less Likely
High CVE-2022-41045 Windows ALPC Elevation of Privilege 7.8 0.0032 Exploitation Less Likely
High CVE-2022-41100 Windows ALPC Elevation of Privilege 7.8 0.0032 Exploitation Less Likely
High CVE-2022-41093 Windows Advanced Local Procedure Call Elevation of Privilege 7.8 0.0031 Exploitation Less Likely
Routine CVE-2022-41097 Network Policy Server (NPS) Information Disclosure 6.5 0.0165 Exploitation Less Likely
Routine CVE-2022-41098 Windows Win32K Information Disclosure 5.5 0.0078 Exploitation Less Likely
Routine CVE-2022-23824 AMD CPU Branch Information Disclosure 5.5 0.0060 Exploitation Less Likely
Routine CVE-2022-41086 Windows Group Policy Preference Client Elevation of Privilege 6.4 0.0027 Exploitation Less Likely
Showing 1 to 24 of 24 1