June 2023 Patch Tuesday: Critical patches for Microsoft Windows, SharePoint, Exchange
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-32031+1 related CVE | Microsoft Exchange Server Remote Code Execution Vulnerability | 8.8 group max | 81% | ||
| CVE-2023-29357 | Privilege Escalation via JWT Authentication Bypass in Microsoft SharePoint Server | 9.8 | 100% | KEVRansomware | KEV |
CVE-2023-32015+2 related CVEs | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability | 9.8 | 2% | ||
| CVE-2023-3079 | Type Confusion in Google Chromium V8 Engine Exploited in the Wild | 8.8 | 38% | KEVPoC | KEV |
From the original article
2 min read at helpnetsecurity.com
For June 2023 Patch Tuesday, Microsoft has delivered 70 new patches but, for once, none of the fixed vulnerabilities are currently exploited by attackers nor were publicly known before today! Microsoft has previously fixed CVE-2023-3079 , a type confusion vulnerability in Chromium’s V8 JavaScript engine, which was spotted being exploited by attackers to target Chrome users.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.