bleepingcomputer[.]com/news/microsoft/microsoft-december-2022-patch-tuesday-fixes-2-zero-days-49-flaws/
bleepingcomputer[.]com/news/microsoft/windows-10-kb5021233-and-kb5021237-updates-released/
neowin[.]net/news/december-patch-tuesday-update-for-windows-11-22h2-kb5021255-and-21h2-kb5021234-out-now/
Today is Microsoft's December 2022 Patch Tuesday, and with it comes fixes for two zero-day vulnerabilities, including an actively exploited bug, and a total of 49 flaws.Six of the 49 vulnerabilities fixed in today's update are classified as 'Critical' as they allow remote code execution, one of the most severe types of vulnerabilities.
The number of bugs in each vulnerability category is listed below:
19 Elevation of Privilege Vulnerabilities
2 Security Feature Bypass Vulnerabilities
23 Remote Code Execution Vulnerabilities
3 Information Disclosure Vulnerabilities
3 Denial of Service Vulnerabilities
1 Spoofing VulnerabilityThe above counts do not include twenty-five Microsoft Edge vulnerabilities previously fixed on December 5th.
Several copies of Windows also received KB5012170, which adds to the revoked [banned] list of files for Secure Boot. It's worth noting because it gave lots of folks problems when released in the past.
neowin[.]net/news/microsoft-pushes-windows-11-22h2-secure-boot-dbx-update-thats-known-to-be-bug-ridden/
We're also coming up on EOL [End Of Life] for Win10 21H1, along with Win8, and Win7 on Extended support.