Microsoft's Final 2023 Patch Tuesday: 34 Flaws Fixed, Including 4 Critical
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-3236 | Unauthenticated Code Injection RCE in Sophos Firewall (User Portal/Webadmin) | 9.8 | 99% | KEV | KEV |
| CVE-2023-21751 | Azure DevOps Server Spoofing Vulnerability | 6.5 | <1% | ||
CVE-2023-35628+4 related CVEs | Windows MSHTML Platform Remote Code Execution Vulnerability | 8.1 group max | 93% | ||
| CVE-2023-35636 | Microsoft Outlook Information Disclosure Vulnerability | 6.5 | 18% | ||
CVE-2023-35638+2 related CVEs | DHCP Server Service Denial of Service Vulnerability | 7.5 group max | 3% | ||
| CVE-2023-36019 | Microsoft Power Platform Connector Spoofing Vulnerability | 7.4 | 16% |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Dec 13, 2023 Patch Tuesday / Windows Security Microsoft released its final set of Patch Tuesday updates for 2023, closing out 34 flaws in its software, making it one of the lightest releases in recent years. Of the 34 shortcomings, four are rated Critical and 30 are rated Important in severity.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.