=================================================================== CERT-Renater Note d'Information No. 2022/VULN466 _____________________________________________________________________ DATE : 15/12/2022 HARDWARE PLATFORM(S): / OPERATING SYSTEM(S): Systems running Microsoft software. ====================================================================https://msrc.microsoft.com/update-guide/releaseNote/2022-Dec _____________________________________________________________________ December 2022 Security Updates Updates this Month This release consists of security updates for the following products, features and roles. .NET Framework Azure Client Server Run-time Subsystem (CSRSS) Microsoft Bluetooth Driver Microsoft Dynamics Microsoft Edge (Chromium-based) Microsoft Graphics Component Microsoft Office Microsoft Office OneNote Microsoft Office Outlook Microsoft Office SharePoint Microsoft Office Visio Microsoft Windows Codecs Library Role: Windows Hyper-V SysInternals Windows Certificates Windows Contacts Windows DirectX Windows Error Reporting Windows Fax Compose Form Windows HTTP Print Provider Windows Kernel Windows PowerShell Windows Print Spooler Components Windows Projected File System Windows Secure Socket Tunneling Protocol (SSTP) Windows SmartScreen Windows Subsystem for Linux Windows Terminal Please note the following information regarding the security updates: Security Update Guide Blog Posts Date Blog Post August 9, 2022 Security Update Guide Notification System News: Create your profile now January 11, 2022 Coming Soon: New Security Update Guide Notification System February 9, 2021 Continuing to Listen: Good News about the Security Update Guide API January 13, 2021 Security Update Guide Supports CVEs Assigned by Industry Partners December 8, 2020 Security Update Guide: Let’s keep the conversation going November 9, 2020 Vulnerability Descriptions in the New Version of the Security Update Guide Relevant Information The new Hotpatching feature is now generally available. Please see Hotpatching feature for Windows Server Azure Edition virtual machines (VMs) for more information. Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 operating systems, please see Windows Lifecycle Facts Sheet. Microsoft is improving Windows Release Notes. For more information, please see What's next for Windows release notes. A list of the latest servicing stack updates for each operating system can be found in ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update. In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features. Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See 4522133 for more information. FAQs, Mitigations, and Workarounds The following CVEs have FAQs, Mitigations, or Workarounds. You can see these in more detail from the Vulnerabilities tab by selecting FAQs, Mitigations and Workarounds columns in the Edit Columns panel. CVE-2022-24480 CVE-2022-26804 CVE-2022-26805 CVE-2022-26806 CVE-2022-41074 CVE-2022-41076 CVE-2022-41077 CVE-2022-41094 CVE-2022-41115 CVE-2022-41121 CVE-2022-41127 CVE-2022-4174 CVE-2022-4175 CVE-2022-4177 CVE-2022-4178 CVE-2022-4179 CVE-2022-4180 CVE-2022-4181 CVE-2022-4182 CVE-2022-4183 CVE-2022-4184 CVE-2022-4185 CVE-2022-4186 CVE-2022-4187 CVE-2022-4188 CVE-2022-4189 CVE-2022-4190 CVE-2022-4191 CVE-2022-4192 CVE-2022-4193 CVE-2022-4194 CVE-2022-4195 CVE-2022-44666 CVE-2022-44667 CVE-2022-44668 CVE-2022-44669 CVE-2022-44670 CVE-2022-44671 CVE-2022-44673 CVE-2022-44674 CVE-2022-44675 CVE-2022-44676 CVE-2022-44677 CVE-2022-44678 CVE-2022-44679 CVE-2022-44680 CVE-2022-44681 CVE-2022-44682 CVE-2022-44683 CVE-2022-44687 CVE-2022-44688 CVE-2022-44689 CVE-2022-44690 CVE-2022-44691 CVE-2022-44692 CVE-2022-44693 CVE-2022-44694 CVE-2022-44695 CVE-2022-44696 CVE-2022-44697 CVE-2022-44698 CVE-2022-44699 CVE-2022-44702 CVE-2022-44704 CVE-2022-44708 CVE-2022-44710 CVE-2022-44713 CVE-2022-47212 CVE-2022-47213 Known Issues You can see these in more detail from the Deployments tab by selecting Known *Issues column in the Edit Columns panel. For more information about Windows Known Issues, please see Windows message center (links to currently-supported versions of Windows are in the left pane). KB Article Applies To 5020880 .NET core and .NET Framework, Change in how WPF-based applications render XPS documents 5021233 Windows 10, version 20H2, Windows 10, version 21H1, Windows 10, version 21H2, Windows 10, version 22H2 5021234 Windows 11 version 21H2 5021235 Windows 10, version 1607, Windows Server 2016 5021237 Windows Server 2019 5021243 Windows 10 5021249 Windows Server 2022 5021255 Windows 11 version 22H2 5021285 Windows Server 2012 (Monthly Rollup) 5021288 Windows 7, Windows Server 2008 R2 (Security-only update) 5021289 Windows Server 2008 (Monthly Rollup) 5021291 Windows 7, Windows Server 2008 R2 (Monthly Rollup) 5021293 Windows Server 2008 (Security-only update) 5021294 Windows 8.1, Windows Server 2012 R2 (Monthly Rollup) 5021296 Windows 8.1, Windows Server 2012 R2 (Security-only update) 5021303 Windows Server 2012 (Security-only update) Released: Dec 15, 2022 ========================================================+ CERT-RENATER | tel : 01-53-94-20-44 + + 23/25 Rue Daviel | fax : 01-53-94-20-41 + + 75013 Paris | email:cert@support.renater.fr + =======================================================