Microsoft Server security updates, November 2022 (Patch Tuesday 2022-11-08)

Every Microsoft server-product CVE that the Microsoft Security Update Guide published in November 2022, including the Patch Tuesday release on 2022-11-08 and any out-of-band updates. Client-only products (Edge, Office apps, consumer Windows) are not tracked.

Advisories: 43
Critical: 0
High: 33
In CISA KEV: 5
CVEs: 43

Microsoft server CVEs, November 2022

Nov 9, 2022
High [CVE-2022-38023] Netlogon RPC Elevation of Privilege Vulnerability
High8.1
Nov 9, 2022
High [CVE-2022-37992] Windows Group Policy Elevation of Privilege Vulnerability
High7.8
Nov 9, 2022
High [CVE-2022-41100] Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
High7.8
Nov 9, 2022
High [CVE-2022-41058] Windows Network Address Translation (NAT) Denial of Service Vulnerability
High7.5
Nov 9, 2022
High [CVE-2022-41101] Windows Overlay Filter Elevation of Privilege Vulnerability
High7.8
Nov 9, 2022
High [CVE-2022-41078] Microsoft Exchange Server Spoofing Vulnerability
High8.0
Nov 9, 2022
High [CVE-2022-41123] Microsoft Exchange Server Elevation of Privilege Vulnerability
High7.8
Nov 9, 2022
High [CVE-2022-41080] Microsoft Exchange Server Elevation of Privilege Vulnerability
High8.8ExploitedCISA KEV
Nov 9, 2022
High [CVE-2022-41128] Windows Scripting Languages Remote Code Execution Vulnerability
High8.8ExploitedCISA KEV
Nov 9, 2022
High [CVE-2022-37966] Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
High8.1
Nov 9, 2022
High [CVE-2022-37967] Windows Kerberos Elevation of Privilege Vulnerability
High7.2
Nov 9, 2022
High [CVE-2022-41039] Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
High8.1
Nov 9, 2022
High [CVE-2022-41044] Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
High8.1
Nov 9, 2022
High [CVE-2022-41088] Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
High8.1
Nov 9, 2022
High [CVE-2022-41045] Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
High7.8
Nov 9, 2022
High [CVE-2022-41047] Microsoft ODBC Driver Remote Code Execution Vulnerability
High8.8
Nov 9, 2022
High [CVE-2022-41092] Windows Win32k Elevation of Privilege Vulnerability
High7.8
Nov 9, 2022
High [CVE-2022-41050] Windows Extensible File Allocation Table Elevation of Privilege Vulnerability
High7.8
Nov 9, 2022
High [CVE-2022-41052] Windows Graphics Component Remote Code Execution Vulnerability
High7.8
Nov 9, 2022
High [CVE-2022-41095] Windows Digital Media Receiver Elevation of Privilege Vulnerability
High7.8
Nov 9, 2022
High [CVE-2022-41053] Windows Kerberos Denial of Service Vulnerability
High7.5
Nov 9, 2022
High [CVE-2022-41096] Microsoft DWM Core Library Elevation of Privilege Vulnerability
High7.8
Nov 9, 2022
High [CVE-2022-41054] Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
High7.8
Nov 9, 2022
High [CVE-2022-41056] Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability
High7.5
Nov 9, 2022
High [CVE-2022-41057] Windows HTTP.sys Elevation of Privilege Vulnerability
High7.8
Nov 9, 2022
High [CVE-2022-41061] Microsoft Word Remote Code Execution Vulnerability
High7.8
Nov 9, 2022
High [CVE-2022-41062] Microsoft SharePoint Server Remote Code Execution Vulnerability
High8.8
Nov 9, 2022
High [CVE-2022-41109] Windows Win32k Elevation of Privilege Vulnerability
High7.8
Nov 9, 2022
High [CVE-2022-41113] Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
High7.8
Nov 9, 2022
High [CVE-2022-41114] Windows Bind Filter Driver Elevation of Privilege Vulnerability
High7.0
Nov 9, 2022
High [CVE-2022-41073] Windows Print Spooler Elevation of Privilege Vulnerability
High7.8ExploitedCISA KEV
Nov 9, 2022
High [CVE-2022-41118] Windows Scripting Languages Remote Code Execution Vulnerability
High7.5
Nov 9, 2022
High [CVE-2022-41125] Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
High7.8ExploitedCISA KEV
Nov 9, 2022
Medium [CVE-2022-41122] Microsoft SharePoint Server Spoofing Vulnerability
Medium6.5
Nov 9, 2022
Medium [CVE-2022-38015] Windows Hyper-V Denial of Service Vulnerability
Medium6.5
Nov 9, 2022
Medium [CVE-2022-41090] Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
Medium5.9
Nov 9, 2022
Medium [CVE-2022-41091] Windows Mark of the Web Security Feature Bypass Vulnerability
Medium5.4ExploitedCISA KEV
Nov 9, 2022
Medium [CVE-2022-41097] Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability
Medium6.5
Nov 9, 2022
Medium [CVE-2022-41055] Windows Human Interface Device Information Disclosure Vulnerability
Medium5.5
Nov 9, 2022
Medium [CVE-2022-41098] Windows GDI+ Information Disclosure Vulnerability
Medium5.5
Nov 9, 2022
Medium [CVE-2022-41060] Microsoft Word Information Disclosure Vulnerability
Medium5.5
Nov 9, 2022
Medium [CVE-2022-41103] Microsoft Word Information Disclosure Vulnerability
Medium5.5
Nov 9, 2022
Medium [CVE-2022-41116] Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
Medium5.9

Get an email when Microsoft publishes the next one.

See Microsoft's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Microsoft

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.