[German]Tip for people who are still running Windows 7 SP1 and/or Windows Server 2008 R2 and want to continue securing the system. ACROS Security will continue to support these systems in 2023 and 2024 with micropatches that close known vulnerabilities.
[German]On October 11, 2022 (second Tuesday of the month, Microsoft Patchday), Microsoft released several security-related updates for still-supported Microsoft Office versions and other products. The updates are available for the installable MSI version of Microsoft Office (the click-to-run packages obtain the updates through other channels). Office 2019 does not appear in the list because it is distributed via click-to-run packages and receives security updates via the Office Update feature. Below is an overview of the available updates.
[German]Microsoft has updated the Edge browser in the stable channel to version 106.0.1370.42 as of October 10, 2022. This is a bug-fix update that is supposed to iron out various problems. The release notes don't really give anything away. It only says: Fixed various bugs and performance issues. In case Edge won't launch after update, read Edge 106.0.1370.37 with bug fixes; failed start issue not fixed.
[German]Google has released the Google Chrome 106.0.5249.119 update in the stable channel for Mac , Linux and Windows on October 11, 2022. It is a bug fix update that addresses vulnerabilities.
[German]Microsoft has also released security updates for Windows 7 and 8.1 as well as for the Windows Server counterparts 2008 R2 and 2012/R2 on Patchday. Here is an overview of these updates for Windows 7/8.1 and the corresponding Windows Server versions 2008 R2 and 2012/R2.
[German]On October 11 (second Tuesday of the month, Patchday at Microsoft), Microsoft also released cumulative updates for Windows 11. In addition, Windows Server 2022 received an update. Here are some details about these updates, which are supposed to fix vulnerabilities as well as problems.
[German]Microsoft has released security updates for Exchange Server 2013, Exchange Server 2016 and Exchange Server 2019, effective October 11, 2022. These updates are intended to address vulnerabilities reported by external security partners or found by Microsoft. However, the 0-day vulnerabilities (ProxyNotShell) that have been known since late September 2022 will not be fixed.
[German]I'm posting a first warning about the October 2022 security updates for Windows here on the blog because a reader from the business environment pointed it out to me. The domain join hardening changes made with the updates to close the vulnerability (CVE-2022-38042) have powerful collateral damage. With this update, AD join of Windows clients may no longer be possible if certain conditions cannot be met – this affects all versions of Windows.
[German]On October 11, 2022 (second Tuesday of the month, patchday at Microsoft), several cumulative updates were released for the supported Windows 10 builds (from RTM version to current version) as well as for the Windows Server counterparts. Here are some details on the respective security updates.
[German]On October 11, 2022, Microsoft released security updates for Windows clients and servers, for Office, etc. – as well as for other products – were released. The security updates fix 84 vulnerabilities, 13 of which are critical and one 0-day vulnerability. Among other things, a printer vulnerability in Windows, and an Active Directory Certificate Services vulnerability are corrected – both rated critical. Below is a compact overview of these updates released on Patchday.
MVP:
2013 – 2016
WIMVP:
2017 – 2020
