Exploited Vulnerabilities Patched Microsoft's Security Update

Arctic Wolf summarizes Microsoft’s November 8, 2022 security updates that patch six actively exploited vulnerabilities affecting Windows and Exchange Server—highlighting high-risk CVEs (including CVE-2022-41040 and CVE-2022-41082 used in the ProxyNotShell chain) that enable remote code execution and privilege escalation; the bulletin lists impacted products, relevant KBs/patches, and recommends applying updates, restricting external Exchange access, and disabling remote PowerShell for non-admins.