Microsoft Windows Security Updates November 2022 overview

Microsoft launched safety and non-security updates for all supported shopper and server variations of the Home windows working system on the November 2022 Patch Tuesday. The updates can be found already, and most house Home windows gadgets ought to obtain the updates mechanically beginning at this time.

The next information helps house customers and system directors alike on the subject of updating techniques. It contains data on the launched updates, hyperlinks to official Microsoft assist pages and guide downloads, a completely up to date record of identified points for every shopper model of Home windows, hyperlinks to all different safety updates and non-security updates Microsoft launched, and extra.,

Tip: take a look at our overview of the October 2022 Patch Day right here.

Microsoft Home windows Safety Updates: November 2022

The next Excel spreadsheet contains the launched safety updates for Home windows and different firm merchandise. Simply obtain it with a click on on the next hyperlink: security-updates-windows-november-2022

Govt Abstract

Home windows 10 model 22H2, aka the Home windows 10 2022 Replace, was launched this month.
There will not be a preview replace for the month of December 2022.
Microsoft launched safety updates for all supported shopper and server variations of Home windows.
Microsoft launched safety updates for different firm merchandise, together with .NET Framework, Azure, Microsoft Dynamics, Microsoft Workplace, SysInternals, Visible Studio.
The next shopper variations of Home windows have identified points: Home windows 7, Home windows 8.1, Home windows 10 model 21H2, Home windows 11 model 22H2
The next server variations of Home windows have identified points: Home windows Server 2008, 2008 R2, 2012, 2012 R2, Home windows Server 2019

Working System Distribution

Home windows 7 (prolonged assist solely): 21 vulnerabilities: 4 vital and 17 vital
- Home windows Level-to-Level Tunneling Protocol Distant Code Execution Vulnerability — CVE-2022-41039
- Home windows Scripting Languages Distant Code Execution Vulnerability — CVE-2022-41128
- Home windows Scripting Languages Distant Code Execution Vulnerability — CVE-2022-41118
- Home windows Level-to-Level Tunneling Protocol Distant Code Execution Vulnerability — CVE-2022-41044
Home windows 8.1: 23 vulnerabilities: 4 vital and 19 vital
- Home windows Scripting Languages Distant Code Execution Vulnerability — CVE-2022-41128
- Home windows Scripting Languages Distant Code Execution Vulnerability — CVE-2022-41118
- Home windows Level-to-Level Tunneling Protocol Distant Code Execution Vulnerability — CVE-2022-41088
- Home windows Level-to-Level Tunneling Protocol Distant Code Execution Vulnerability — CVE-2022-41039
Home windows 10 model 21H1, 21H2 and 22H2: 37 vulnerabilities, 5 vital and 32 vital
- Home windows Level-to-Level Tunneling Protocol Distant Code Execution Vulnerability — CVE-2022-41039
- Home windows Level-to-Level Tunneling Protocol Distant Code Execution Vulnerability — CVE-2022-41088
- Home windows Hyper-V Denial of Service Vulnerability — CVE-2022-38015
- Home windows Scripting Languages Distant Code Execution Vulnerability — CVE-2022-41128
- Home windows Scripting Languages Distant Code Execution Vulnerability — CVE-2022-41118
Home windows 11 and Home windows 11 model 22H2: 35 vulnerabilities, 5 vital and 30 vital

Home windows Server merchandise

Home windows Server 2008 R2 (prolonged assist solely): 24 vulnerabilities: 6 vital and 18 vital
- Home windows Level-to-Level Tunneling Protocol Distant Code Execution Vulnerability — CVE-2022-41039
- Home windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability — CVE-2022-37966
- Home windows Kerberos Elevation of Privilege Vulnerability — CVE-2022-37967
- Home windows Scripting Languages Distant Code Execution Vulnerability — CVE-2022-41128
- Home windows Scripting Languages Distant Code Execution Vulnerability — CVE-2022-41118
- Home windows Level-to-Level Tunneling Protocol Distant Code Execution Vulnerability — CVE-2022-41044
Home windows Server 2012 R2: 26 vulnerabilities: 6 vital and 20 vital
- identical as Home windows Server 2008 R2.
Windows Server 2016: 34 vulnerabilities: 7 vital and 27 vital
- Home windows Level-to-Level Tunneling Protocol Distant Code Execution Vulnerability — CVE-2022-41039
- Home windows Level-to-Level Tunneling Protocol Distant Code Execution Vulnerability — CVE-2022-41088
- Home windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability — CVE-2022-37966
- Home windows Hyper-V Denial of Service Vulnerability — CVE-2022-38015
- Home windows Kerberos Elevation of Privilege Vulnerability — CVE-2022-37967
- Home windows Scripting Languages Distant Code Execution Vulnerability — CVE-2022-41128
- Home windows Scripting Languages Distant Code Execution Vulnerability — CVE-2022-41118
Home windows Server 2019: 37 vulnerabilities: 7 vital and 30 vital
- identical as Home windows Server 2016
Home windows Server 2022: 39 vulnerabilities: 10 vital and 56 vital
- identical as Home windows Server 2016

Home windows Safety Updates

Home windows 7 SP1 and Home windows Server 2008 R2

Updates and enhancements:

Daylight saving time for Jordan up to date.
Addresses a difficulty the place, after putting in the January 11, 2022 or later replace, the Forest Belief creation course of fails to populate the DNS identify suffixes into the belief data attributes.
Addresses a Distributed Part Object Mannequin (DCOM) authentication hardening situation to mechanically increase authentication stage for all non-anonymous activation requests from DCOM purchasers. It will happen if the authentication stage is lower than RPC_C_AUTHN_LEVEL_PKT_INTEGRITY. (Month-to-month-Safety solely)
Addresses a difficulty the place Microsoft Azure Energetic Listing (AAD) Utility Proxy Connector can’t retrieve a Kerberos ticket on behalf of the consumer due to the next common API error: “The deal with specified is invalid (0x80090301).” (Month-to-month-Safety solely)
Safety updates.

Home windows 8.1 and Home windows Server 2012 R2

Updates and enhancements:

Daylight saving time for Jordan up to date.
Addresses a Distributed Part Object Mannequin (DCOM) authentication hardening situation to mechanically increase authentication stage for all non-anonymous activation requests from DCOM purchasers. It will happen if the authentication stage is lower than RPC_C_AUTHN_LEVEL_PKT_INTEGRITY. (Month-to-month-Safety solely)
Addresses a difficulty the place Microsoft Azure Energetic Listing (AAD) Utility Proxy Connector can’t retrieve a Kerberos ticket on behalf of the consumer due to the next common API error: “The deal with specified is invalid (0x80090301).” (Month-to-month-Safety solely)
Addresses a difficulty the place, after putting in the January 11, 2022 or later replace, the Forest Belief creation course of fails to populate the DNS identify suffixes into the belief data attributes.
Addresses a difficulty the place the Microsoft Visible C++ Redistributable Runtime doesn’t load into the Native Safety Authority Server Service (LSASS) when Protected Course of Mild (PPL) is enabled. (Month-to-month-Safety solely)
Safety updates

Home windows 10 model 21H1m 21H2 and 22H2

Updates and enhancements:

Safety updates
Adjustments of the preview updates, launched below KB5020953

Home windows 11 Launch model

Updates and enhancements:

Safety updates
Adjustments of the preview updates, launched below KB5018483

Home windows 11 model 22H2

Updates and enhancements:

Addresses a difficulty in File Explorer, which fails to localize folders.
Safety updates.
Adjustments of the preview replace, launched below Kb5018496.

Different safety updates

KB5019958: Cumulative safety replace for Web Explorer: November 8, 2022

2022-11 Cumulative Replace for Home windows 10 Model 1507 (KB5019970)

2022-11 Cumulative Replace for Home windows Server 2016 and Home windows 10 Model 1607 (KB5019964)

2022-11 Cumulative Replace for Home windows Server 2019 and Home windows 10 Model 1809 (KB5019966)

2022-11 Cumulative Replace for Home windows 10 Model 21H1, Home windows 10 Model 20H2 (KB5019959)

Server updates

2022-11 Safety Solely High quality Replace for Home windows Server 2008 (KB5020005)

2022-11 Safety Month-to-month High quality Rollup for Home windows Server 2008 (KB5020019)

2022-11 Safety Month-to-month High quality Rollup for Home windows Embedded 8 Customary and Home windows Server 2012 (KB5020009)

.NET Framework

2022-11 Safety Solely Replace for .NET Framework 4.8 for Home windows Embedded 8 Customary and Home windows Server 2012 (KB5020606)

2022-11 Safety Solely Replace for .NET Framework 4.8 for Home windows 8.1 and Home windows Server 2012 R2 (KB5020608)

2022-11 Safety Solely Replace for .NET Framework 4.8 for Home windows Embedded Customary 7, Home windows 7, and Home windows Server 2008 R2 (KB5020609)

2022-11 Safety Solely Replace for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Home windows Embedded 8 Customary and Home windows Server 2012 (KB5020610)

2022-11 Safety Solely Replace for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Home windows 8.1 and Home windows Server 2012 R2 (KB5020611)

2022-11 Safety Solely Replace for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Home windows Embedded Customary 7, Home windows 7, Home windows Server 2008 R2, and Home windows Server 2008 (KB5020612)

2022-11 Safety and High quality Rollup for .NET Framework 4.8 for Home windows Embedded 8 Customary and Home windows Server 2012 (KB5020618)

2022-11 Safety and High quality Rollup for .NET Framework 4.8 for Home windows 8.1 and Home windows Server 2012 R2 (KB5020620)

2022-11 Safety and High quality Rollup for .NET Framework 4.8 for Home windows Embedded Customary 7, Home windows 7, and Home windows Server 2008 R2 (KB5020621)

2022-11 Safety and High quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Home windows Embedded 8 Customary and Home windows Server 2012 (KB5020628)

2022-11 Safety and High quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Home windows 8.1 and Home windows Server 2012 R2 (KB5020629)

2022-11 Safety and High quality Rollup for .NET Framework 4.6.2 for Home windows Embedded Customary 7, Home windows 7, Home windows Server 2008 R2, and Home windows Server 2008 (KB5020630)

2022-11 Safety Solely Replace for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Home windows Embedded Customary 7, Home windows 7, and Home windows Server 2008 R2 (KB5020678)

2022-11 Safety Solely Replace for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Home windows Embedded 8 Customary and Home windows Server 2012 (KB5020679)

2022-11 Safety Solely Replace for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Home windows 8.1 and Home windows Server 2012 R2 (KB5020680)

2022-11 Safety Solely Replace for .NET Framework 4.6.2 for Home windows Server 2008 (KB5020681)

2022-11 Safety and High quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Home windows Embedded Customary 7, Home windows 7, and Home windows Server 2008 R2 (KB5020688)

2022-11 Safety and High quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Home windows Embedded 8 Customary and Home windows Server 2012 (KB5020689)

2022-11 Safety and High quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Home windows 8.1 and Home windows Server 2012 R2 (KB5020690)

2022-11 Safety and High quality Rollup for .NET Framework 2.0, 3.0, 4.6.2 for Home windows Server 2008 (KB5020691)

2022-11 Cumulative Replace for .NET Framework 3.5 and 4.8 for Home windows 10 Model 21H1, Home windows 10 Model 20H2,Home windows 10 Model 1809, and Home windows 10 Model 1607 (KB5020613)

2022-11 Cumulative Replace for .NET Framework 4.8 for Home windows Server 2016 and Home windows 10 Model 1607 (KB5020614)

2022-11 Cumulative Replace for .NET Framework 3.5 and 4.8 for Home windows Server 2019 and Home windows 10 Model 1809 (KB5020615)

2022-11 Cumulative Replace for .NET Framework 3.5 and 4.8 for Home windows 11 (KB5020617)

2022-11 Cumulative Replace for .NET Framework 3.5 and 4.8 for Microsoft server working system, model 22H2 for x64 (KB5020619)

2022-11 Cumulative Replace for .NET Framework 3.5 and 4.8.1 for Home windows 11 (KB5020622)

2022-11 Cumulative Replace for .NET Framework 3.5 and 4.8.1 for Home windows 10 Model 21H1, Home windows 10 Model 20H2 (KB5020623)

2022-11 Cumulative Replace for .NET Framework 3.5 and 4.8.1 for Home windows 11 (KB5020624)

2022-11 Cumulative Replace for .NET Framework 3.5 and 4.7.2 for Home windows Server 2019 and Home windows 10 Model 1809 (KB5020627)

2022-11 Cumulative Replace for .NET Framework 3.5 and 4.8.1 for Microsoft server working system model 21H2 for x64 (KB5020632)

2022-11 Cumulative Replace for .NET Framework 3.5 and 4.8.1 for Home windows Server, model 21H1, Home windows 10 Model 21H1, Home windows Server, model 20H2, Home windows 10 Model 20H2 (KB5020676)

2022-11 Cumulative Replace for .NET Framework 3.5, 4.7.2 and 4.8 for Home windows Server 2019 and Home windows 10 Model 1809 (KB5020685)

2022-11 Cumulative Replace for .NET Framework 3.5, 4.8 and 4.8.1 for Home windows 10 Model 20H2 (KB5020686)

2022-11 Cumulative Replace for .NET Framework 3.5, 4.8 and 4.8.1 for Home windows 10 Model 21H2 (KB5020687)

2022-11 Cumulative Replace for .NET Framework 3.5, 4.8 and 4.8.1 for Microsoft server working system model 21H2 for x64 (KB5020692)

2022-11 Cumulative Replace for .NET Framework 3.5 and 4.8 for Microsoft server working system, model 22H2 for x64 (KB5020693)

2022-11 Cumulative Replace for .NET Framework 3.5, 4.8 and 4.8.1 for Home windows 10 Model 22H2 (KB5020694)

2022-11 Cumulative Replace for .NET Framework 3.5, 4.8 and 4.8.1 for Home windows 11 (KB5020695)

2022-11 Cumulative Replace for .NET Framework 3.5, 4.8 and 4.8.1 for Home windows 10 Model 21H1 (KB5020801)

Identified Points

Home windows 7 SP1 and Home windows Server 2008 R2

(New) After this replace or a later Home windows replace is put in, area be part of operations is likely to be unsuccessful and error “0xaac (2732): NERR_AccountReuseBlockedByPolicy” happens.
- Microsoft launched steering on the difficulty right here.
(Previous) Updates might present as failed and could also be uninstalled as a result of the machine will not be on ESU.
(Fastened) File copies which use Group Coverage Preferences would possibly fail or would possibly create empty shortcuts or information which have 0 (zero) bytes.
- To mitigate the difficulty, one of many following must be completed:
  - Clear the “Run in logged-on consumer’s safety context (consumer coverage possibility)” test field.
  - Within the affected Group Coverage, change “Motion” from “Exchange” to “Replace”.
  - If a wildcard (*) is used within the location or vacation spot, deleting the trailing “” (backslash, with out citation marks) from the vacation spot would possibly enable the copy to achieve success.

Home windows 8.1 and Home windows Server 2012 R2

(New) After this replace or a later Home windows replace is put in, area be part of operations is likely to be unsuccessful and error “0xaac (2732): NERR_AccountReuseBlockedByPolicy” happens.
- Microsoft launched steering on the difficulty right here.
(Fastened) File copies which use Group Coverage Preferences would possibly fail or would possibly create empty shortcuts or information which have 0 (zero) bytes.
- To mitigate the difficulty, one of many following must be completed:
  - Clear the “Run in logged-on consumer’s safety context (consumer coverage possibility)” test field.
  - Within the affected Group Coverage, change “Motion” from “Exchange” to “Replace”.
  - If a wildcard (*) is used within the location or vacation spot, deleting the trailing “” (backslash, with out citation marks) from the vacation spot would possibly enable the copy to achieve success.

Home windows 10 variations 21H1, 21H2 and 22H2

(Fastened) File copies which use Group Coverage Preferences would possibly fail or would possibly create empty shortcuts or information which have 0 (zero) bytes.
- To mitigate the difficulty, one of many following must be completed:
  - Clear the “Run in logged-on consumer’s safety context (consumer coverage possibility)” test field.
  - Within the affected Group Coverage, change “Motion” from “Exchange” to “Replace”.
  - If a wildcard (*) is used within the location or vacation spot, deleting the trailing “” (backslash, with out citation marks) from the vacation spot would possibly enable the copy to achieve success.
(New, once more) Customized installations might not obtain the brand new Microsoft Edge internet browser, whereas the previous model could also be eliminated.

Home windows 11

(New) Provisioning packages might not work as anticipated. Home windows might solely be configured partially and the ” Out Of Field Expertise may not end or would possibly restart unexpectedly”.
- Provisioning the Home windows gadget earlier than upgrading to Home windows 11 model 22H2 fixes the difficulty.
(New) Copying giant information (a number of gigabytes) might take longer than anticipated.
- Use the instructions robocopy someserversomeshare c:somefolder somefile.img /J or xcopy someserversomeshare c:somefolder /J till fastened.
(Fastened) File copies which use Group Coverage Preferences would possibly fail or would possibly create empty shortcuts or information which have 0 (zero) bytes.
- To mitigate the difficulty, one of many following must be completed:
  - Clear the “Run in logged-on consumer’s safety context (consumer coverage possibility)” test field.
  - Within the affected Group Coverage, change “Motion” from “Exchange” to “Replace”.
  - If a wildcard (*) is used within the location or vacation spot, deleting the trailing “” (backslash, with out citation marks) from the vacation spot would possibly enable the copy to achieve success.

Home windows 11 model 22H2

(Previous) Provisioning packages might not work as anticipated. Home windows might solely be configured partially and the ” Out Of Field Expertise may not end or would possibly restart unexpectedly”.
- Provisioning the Home windows gadget earlier than upgrading to Home windows 11 model 22H2 fixes the difficulty.
(Previous) Copying giant information (a number of gigabytes) might take longer than anticipated.
- Use the instructions robocopy someserversomeshare c:somefolder somefile.img /J or xcopy someserversomeshare c:somefolder /J till fastened.

Safety advisories and updates

ADV 990001 — Newest Servicing Stack Updates

Non-security updates

Microsoft Workplace Updates

You discover Workplace replace data right here.

obtain and set up the November 2022 safety updates

Most house techniques will obtain the updates mechanically, because of Home windows Replace. Directors have choices to obtain updates manually, and to run guide checks for updates to put in the updates as early as doable.

Notice that it’s endorsed to create a system backup earlier than putting in any updates for Home windows. A system backup provides you an possibility to revive a earlier model.

Do the next to run a guide test for updates:

Choose Begin, kind Home windows Replace and cargo the Home windows Replace merchandise that’s displayed.
Choose test for updates to run a guide test for updates.

Direct replace downloads

Under are useful resource pages with direct obtain hyperlinks, should you choose to obtain the updates to put in them manually.

Home windows 7 and Server 2008 R2

KB5020000 — 2022-11 Safety Month-to-month High quality Rollup for Home windows 7
KB5020013 — 2022-11 Safety Solely High quality Replace for Home windows 7

Home windows 8.1 and Home windows Server 2012 R2

KB5020023 — 2022-11 Safety Month-to-month High quality Rollup for Home windows 8.1
KB5020010 — 2022-11 Safety Solely High quality Replace for Home windows 8.1

Home windows 10 model 21H1

Home windows 10 Model 21H2