众至科技11月漏洞通告_漏洞

<html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta charset="utf-8"> <meta name="generator" content="pdf2htmlEX"> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"> <link rel="stylesheet" href="https://static.pudn.com/base/css/base.min.css"> <link rel="stylesheet" href="https://static.pudn.com/base/css/fancy.min.css"> <link rel="stylesheet" href="https://static.pudn.com/prod/directory_preview_static/638f0b1a35aa1e4b190857aa/raw.css"> <script src="https://static.pudn.com/base/js/compatibility.min.js"></script> <script src="https://static.pudn.com/base/js/pdf2htmlEX.min.js"></script> <script> try{ pdf2htmlEX.defaultViewer = new pdf2htmlEX.Viewer({}); }catch(e){} </script> <title></title> </head> <body> <div id="sidebar" style="display: none"> <div id="outline"> </div> </div> <div id="pf1" class="pf w0 h0" data-page-no="1"><div class="pc pc1 w0 h0"><img class="bi x0 y0 w1 h1" alt="" src="https://static.pudn.com/prod/directory_preview_static/638f0b1a35aa1e4b190857aa/bg1.jpg"><div class="c x0 y1 w2 h2"><div class="t m0 x1 h3 y2 ff1 fs0 fc0 sc0 ls0 ws0">【漏洞通告】 微软 11 月多个安全漏洞</div><div class="t m0 x2 h3 y3 ff2 fs0 fc0 sc1 ls0 ws0">1. 漏洞详情</div><div class="t m0 x3 h3 y4 ff1 fs0 fc0 sc1 ls0 ws0">微软官方发布了  年  月的安全更新。本月更新公布了  个漏洞，</div><div class="t m0 x1 h3 y5 ff1 fs0 fc0 sc1 ls0 ws0">包含  个特权提升漏洞、 个远程执行代码漏洞、 个信息泄露漏洞、 个</div><div class="t m0 x1 h3 y6 ff1 fs0 fc0 sc1 ls0 ws0">拒绝服务漏洞、 个安全功能绕过漏洞、 个欺骗漏洞。</div><div class="t m0 x3 h3 y7 ff1 fs0 fc0 sc1 ls0 ws0">产 品 涉 及    、  、    、  !"#</div><div class="t m0 x1 h3 y8 ff3 fs0 fc0 sc1 ls0 ws0"> $%  &' 、  !"#  ()  、 *+!  ,-./0 、 0!</div><div class="t m0 x1 h3 y9 ff3 fs0 fc0 sc1 ls0 ws0">&#+ 、 *+!12 、*+!3! 、*+!"#$</div><div class="t m0 x1 h3 ya ff3 fs0 fc0 sc1 ls0 ws0">*3  4(*5 、 *+!  #  ++!!  !#</div><div class="t m0 x1 h3 yb ff3 fs0 fc0 sc1 ls0 ws0">45 、 *+!  (672  6' 、 *+!  1#/#/1#  %</div><div class="t m0 x1 h3 yc ff3 fs0 fc0 sc1 ls0 ws0">1# 、*+!1#&.2.#!、*+!& .#% 和</div><div class="t m0 x1 h3 yd ff3 fs0 fc0 sc1 ls0 ws0">*+!* 等。</div><div class="t m0 x3 h3 ye ff1 fs0 fc0 sc1 ls0 ws0">微软本次共修复了  个 +- 漏洞，其中 20//8 已被公开披</div><div class="t m0 x1 h3 yf ff1 fs0 fc0 sc1 ls0 ws0">露：</div><div class="t m0 x3 h3 y10 ff2 fs0 fc0 sc1 ls0 ws0">CVE-2022-41128：Windows Scripting Languages 远程代码执</div></div></div><div class="pi" data-data='{"ctm":[1.611850,0.000000,0.000000,1.611850,0.000000,0.000000]}'></div></div> </body> </html>

<div id="pf2" class="pf w0 h0" data-page-no="2"><div class="pc pc2 w0 h0"><img class="bi x0 y0 w1 h1" alt="" src="https://static.pudn.com/prod/directory_preview_static/638f0b1a35aa1e4b190857aa/bg2.jpg"><div class="c x0 y1 w2 h2"><div class="t m0 x1 h3 y11 ff1 fs0 fc0 sc0 ls0 ws0">行漏洞</div><div class="t m0 x3 h3 y12 ff1 fs0 fc0 sc1 ls0 ws0">该漏洞的 20&& 评分为 ，影响了 9& .#8脚本语言和多个 *+!</div><div class="t m0 x1 h3 y13 ff1 fs0 fc0 sc1 ls0 ws0">版本，利用该漏洞需与用户交互，目前已检测到漏洞利用。</div><div class="t m0 x3 h3 y14 ff2 fs0 fc0 sc1 ls0 ws0">CVE-2022-41091：Windows Mark of the Web 安全功能绕过漏</div><div class="t m0 x1 h3 y15 ff1 fs0 fc0 sc0 ls0 ws0">洞</div><div class="t m0 x3 h3 y16 ff1 fs0 fc0 sc1 ls0 ws0">该漏洞的 20&& 评分为 :，利用该漏洞需与用户交互。可以制作恶意文件</div><div class="t m0 x1 h3 y17 ff1 fs0 fc0 sc1 ls0 ws0">来规避 "#$*34(*5防御，从而导致  !"#() 中的受</div><div class="t m0 x1 h3 y18 ff1 fs0 fc0 sc1 ls0 ws0">保护视图等依赖 (*标记的安全功能受到影响。该漏洞已经公开披露，且</div><div class="t m0 x1 h3 y19 ff1 fs0 fc0 sc1 ls0 ws0">已检测到漏洞利用。</div><div class="t m0 x3 h3 y1a ff2 fs0 fc0 sc1 ls0 ws0">CVE-2022-41073：Windows Print Spooler 特权提升漏洞</div><div class="t m0 x3 h3 y1b ff1 fs0 fc0 sc1 ls0 ws0">该漏洞的 20&& 评分为 ，影响了 *+!后台打印程序，成功利用该</div><div class="t m0 x1 h3 y1c ff1 fs0 fc0 sc1 ls0 ws0">漏洞的本地恶意用户可以获得 &;& 权限，目前已经检测到漏洞利用。</div><div class="t m0 x3 h3 y1d ff2 fs0 fc0 sc1 ls0 ws0">CVE-2022-41125：Windows CNG Key Isolation Service 特权</div><div class="t m0 x1 h3 y1e ff1 fs0 fc0 sc0 ls0 ws0">提升漏洞</div><div class="t m0 x3 h3 y1f ff1 fs0 fc0 sc1 ls0 ws0">该漏洞的 20&& 评分为 ，影响了 *+!2<密钥隔离服务，成功</div><div class="t m0 x1 h3 y20 ff1 fs0 fc0 sc1 ls0 ws0">利用该漏洞的本地恶意用户可以获得 &;& 权限，目前已经检测到漏洞利用。</div></div></div><div class="pi" data-data='{"ctm":[1.611850,0.000000,0.000000,1.611850,0.000000,0.000000]}'></div></div>