Microsoft Patches 80+ Flaws Including Two Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-21709 | Microsoft Exchange Server Elevation of Privilege Vulnerability | 9.8 | 2% | ||
CVE-2023-29328+1 related CVE | Microsoft Teams Remote Code Execution Vulnerability | 8.8 | 2% | ||
CVE-2023-36910+2 related CVEs | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | 9.8 | 3% | ||
| CVE-2023-36884 | Race Condition RCE in Microsoft Windows Search | 7.5 | 99% | KEVRansomware | KEV |
| CVE-2023-38180 | Unauthenticated DoS in Microsoft .NET, ASP.NET Core and Visual Studio 2022 | 7.5 | 14% | KEV | KEV |
From the original article
2 min read at infosecurity-magazine.com
Microsoft released updates for 87 vulnerabilities yesterday, including two that are being actively exploited in the wild. The first zero-day was publicly disclosed in last month’s Patch Tuesday , according to Tenable senior staff research engineer, Satnam Narang.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.