Microsoft addresses 48 CVEs including two zero-day vulnerabilities, one that has been exploited in the wild (CVE-2022-44698) and one that was publicly disclosed prior to a patch being available (CVE-2022-44710).

Microsoft’s December 2022 Patch Tuesday Addresses 48 CVEs (CVE-2022-44698)

Windows SmartScreen Security Feature Bypass Vulnerability

The remote Windows host is missing security update 5021235. It is, therefore, affected by multiple vulnerabilities

  - PowerShell Remote Code Execution Vulnerability (CVE-2022-41076)

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2022-44670, CVE-2022-44676)  

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5021237. It is, therefore, affected by multiple vulnerabilities

  - PowerShell Remote Code Execution Vulnerability (CVE-2022-41076)

  - Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability (CVE-2022-44689)

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2022-44670, CVE-2022-44676)  

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5021249. It is, therefore, affected by multiple vulnerabilities

  - PowerShell Remote Code Execution Vulnerability (CVE-2022-41076)   
  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2022-44670, CVE-2022-44676)  

  - Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability (CVE-2022-44689)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5021234. It is, therefore, affected by multiple vulnerabilities

  - PowerShell Remote Code Execution Vulnerability (CVE-2022-41076)

  - Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability (CVE-2022-44689)

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2022-44676)  

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5021233. It is, therefore, affected by multiple vulnerabilities

  - PowerShell Remote Code Execution Vulnerability (CVE-2022-41076)

  - Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability (CVE-2022-44689)

  - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute     unauthorized arbitrary commands. (CVE-2022-44676)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
168694	KB5021235: Windows 10 Version 1607 and Windows Server 2016 Security Update (December 2022)	Nessus	Windows : Microsoft Bulletins	high
168693	KB5021237: Windows 10 version 1809 / Windows Server 2019 Security Update (December 2022)	Nessus	Windows : Microsoft Bulletins	high
168690	KB5021249: Windows Server 2022 Security Update (December 2022)	Nessus	Windows : Microsoft Bulletins	high
168688	KB5021234: Windows 11 Security Update (December 2022)	Nessus	Windows : Microsoft Bulletins	high
168679	KB5021233: Windows 10 Version 20H2 / 21H1 / 21H2 / 22H2 Security Update (December 2022)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2022-44698

medium

Tenable Plugins

high

high

high

high

high