# MA-897.122022: MyCERT Advisory - Microsoft Releases December 2022 Security Updates

**Date:** 15 Dec 2022  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-897.122022  
**Advisory ID:** MA-897.122022

---

**1.0 Introduction**
Microsoft has released updates to address multiple vulnerabilities in Microsoft software.
**2.0 Impact**
An attacker can exploit some of these vulnerabilities to take control of an affected system.
**3.0 Affected Products**
This release consists of security updates for the following products, features and roles.
- .NET Framework
- Azure
- Client Server Run-time Subsystem (CSRSS)
- Microsoft Bluetooth Driver
- Microsoft Dynamics
- Microsoft Edge (Chromium-based)
- Microsoft Graphics Component
- Microsoft Office
- Microsoft Office OneNote
- Microsoft Office Outlook
- Microsoft Office SharePoint
- Microsoft Office Visio
- Microsoft Windows Codecs Library
- Role: Windows Hyper-V
- SysInternals
- Windows Certificates
- Windows Contacts
- Windows DirectX
- Windows Error Reporting
- Windows Fax Compose Form
- Windows HTTP Print Provider
- Windows Kernel
- Windows PowerShell
- Windows Print Spooler Components
- Windows Projected File System
- Windows Secure Socket Tunneling Protocol (SSTP)
- Windows SmartScreen
- Windows Subsystem for Linux
- Windows Terminal
**4.0 Recommendations**
MyCERT encourages users and administrators to review Microsoft’s [December 2022 Security Update Guide](https://msrc.microsoft.com/update-guide/releaseNote/2022-Dec) and [Deployment Information](https://msrc.microsoft.com/update-guide/deployments) and apply the necessary updates.
Kindly refer to the following URLs:
- <https://msrc.microsoft.com/update-guide/releaseNote/2022-Dec>
- <https://msrc.microsoft.com/update-guide/deployments>
Generally, MyCERT advises the users of these devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please get in touch with MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 09:00 -18:00 MYT 
Web: <https://www.mycert.org.my> 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
- <https://www.cisa.gov/uscert/ncas/current-activity/2022/12/13/microsoft-releases-december-2022-security-updates>
- <https://msrc.microsoft.com/update-guide/releaseNote/2022-Dec>
- <https://msrc.microsoft.com/update-guide/deployments>