CISA known exploited vulnerability

CVE-2022-41128

Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

SOURCE FACT

Microsoft · Windows

Microsoft Windows contains an unspecified vulnerability in the JScript9 scripting language which allows for remote code execution.

Apply updates per vendor instructions.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41128; https://nvd.nist.gov/vuln/detail/CVE-2022-41128

CHECK YOUR OUTSIDE-IN INVENTORY