Vulnerabilitycritical
Microsoft Patch Tuesday for February 2023 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-21529+3 related CVEs | Authenticated Deserialization RCE in Microsoft Exchange Server (CVE-2023-21529) | 8.8 group max | 59% | KEVRansomware | KEV |
CVE-2023-21690+2 related CVEs | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability | 9.8 | 28% | ||
CVE-2023-21715+1 related CVE | Actively Exploited Security Feature Bypass in Microsoft Office Publisher | 7.3 group max | 12% | KEV | KEV |
| CVE-2023-21803 | Windows iSCSI Discovery Service Remote Code Execution Vulnerability | 9.8 | 2% | ||
| CVE-2023-21808 | .NET and Visual Studio Remote Code Execution Vulnerability | 7.8 | 1% | ||
| CVE-2023-21815 | Visual Studio Remote Code Execution Vulnerability | 7.8 | <1% | ||
CVE-2023-23376+1 related CVE | Out-of-Bounds Write Privilege Escalation in Microsoft Windows CLFS Driver | 7.8 | 11% | KEVRansomware | KEV |
From the original article
3 min read at blog.talosintelligence.com
Microsoft released its monthly security update on Tuesday, disclosing 73 vulnerabilities. Of these vulnerabilities, 8 are classified as “Critical”, 64 are classified as “Important”, one vulnerability is classified as “Moderate.” According to Microsoft none of the vulnerabilities has been publicly disclosed before Patch Tuesday and only three vulnerabilities were seen in the wild.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.