Microsoft Windows Security Updates November 2022 overview

[harlan4096]

Microsoft released security and non-security updates for all supported client and server versions of the Windows operating system on the November 2022 Patch Tuesday. The updates are available already, and most home Windows devices should receive the updates automatically starting today.



The following guide helps home users and system administrators alike when it comes to updating systems. It includes information on the released updates, links to official Microsoft support pages and manual downloads, a fully updated list of known issues for each client version of Windows, links to all other security updates and non-security updates Microsoft released, and more.,

Tip: check out our overview of the October 2022 Patch Day here.

Microsoft Windows Security Updates: November 2022The following Excel spreadsheet includes the released security updates for Windows and other company products. Just download it with a click on the following link: security-updates-windows-november-2022

Executive Summary

• Windows 10 version 22H2, aka the Windows 10 2022 Update, was released this month.
  
• There won't be a preview update for the month of December 2022.
  
• Microsoft released security updates for all supported client and server versions of Windows.
  
• Microsoft released security updates for other company products, including .NET Framework, Azure, Microsoft Dynamics, Microsoft Office, SysInternals, Visual Studio.
  
• The following client versions of Windows have known issues: Windows 7, Windows 8.1, Windows 10 version 21H2, Windows 11 version 22H2
  
• The following server versions of Windows have known issues: Windows Server 2008, 2008 R2, 2012, 2012 R2, Windows Server 2019
  

Operating System Distribution

• Windows 7 (extended support only): 21 vulnerabilities: 4 critical and 17 important
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability -- CVE-2022-41039
    
  • Windows Scripting Languages Remote Code Execution Vulnerability -- CVE-2022-41128
    
  • Windows Scripting Languages Remote Code Execution Vulnerability -- CVE-2022-41118
    
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability -- CVE-2022-41044
    
• Windows 8.1: 23 vulnerabilities: 4 critical and 19 important
  • Windows Scripting Languages Remote Code Execution Vulnerability -- CVE-2022-41128
    
  • Windows Scripting Languages Remote Code Execution Vulnerability -- CVE-2022-41118
    
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability -- CVE-2022-41088
    
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability -- CVE-2022-41039
    
• Windows 10 version 21H1, 21H2 and 22H2: 37 vulnerabilities, 5 critical and 32 important
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability -- CVE-2022-41039
    
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability -- CVE-2022-41088
    
  • Windows Hyper-V Denial of Service Vulnerability --  CVE-2022-38015
    
  • Windows Scripting Languages Remote Code Execution Vulnerability -- CVE-2022-41128
    
  • Windows Scripting Languages Remote Code Execution Vulnerability -- CVE-2022-41118
    
• Windows 11 and Windows 11 version 22H2:  35 vulnerabilities, 5 critical and 30 important
  • same as Windows 10
    

Windows Server products

• Windows Server 2008 R2 (extended support only): 24 vulnerabilities: 6 critical and 18 important
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability -- CVE-2022-41039
    
  • Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability -- CVE-2022-37966
    
  • Windows Kerberos Elevation of Privilege Vulnerability -- CVE-2022-37967
    
  • Windows Scripting Languages Remote Code Execution Vulnerability -- CVE-2022-41128
    
  • Windows Scripting Languages Remote Code Execution Vulnerability -- CVE-2022-41118
    
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability -- CVE-2022-41044
    
• Windows Server 2012 R2: 26 vulnerabilities: 6 critical and 20 important
  • same as Windows Server 2008 R2.
    
• Windows Server 2016: 34 vulnerabilities: 7 critical and 27 important
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability -- CVE-2022-41039
    
  • Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability -- CVE-2022-41088
    
  • Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability -- CVE-2022-37966
    
  • Windows Hyper-V Denial of Service Vulnerability -- CVE-2022-38015
    
  • Windows Kerberos Elevation of Privilege Vulnerability -- CVE-2022-37967
    
  • Windows Scripting Languages Remote Code Execution Vulnerability -- CVE-2022-41128
    
  • Windows Scripting Languages Remote Code Execution Vulnerability -- CVE-2022-41118
    
• Windows Server 2019: 37 vulnerabilities: 7 critical and 30 important
  • same as Windows Server 2016
    
• Windows Server 2022:  39 vulnerabilities: 10 critical and 56 important
  • same as Windows Server 2016
    

...

Continue Reading