VulnerabilitycriticalExploited in the wild

Microsoft Patch Tuesday, November 2023 Edition

Krebs on SecurityNov 15, 2023 · 00:00 UTC (Nov 15, 2023)2 min read1

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-36025 CVE-2023-36033 CVE-2023-36036 CVE-2023-36439 CVE-2023-36050 CVE-2023-36039 CVE-2023-36035 CVE-2023-36038 CVE-2023-36413

Tags: cve-2023-36025 cve-2023-36033 cve-2023-36036 cve-2023-36439 cve-2023-36050 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-36025 +2 related CVEs CVE-2023-36036 CVE-2023-36033	Windows SmartScreen Bypass (CVE-2023-36025) Exploited via Crafted Shortcut Files	8.8 group max	88%	KEV	Nov 14, 2023 KEV Nov 14, 2023
CVE-2023-36035 +3 related CVEs CVE-2023-36039 CVE-2023-36050 CVE-2023-36439	Microsoft Exchange Server Spoofing Vulnerability	8.0	87%		Nov 14, 2023
CVE-2023-36038	ASP.NET Core Denial of Service Vulnerability	7.5	3%		Nov 14, 2023
CVE-2023-36413	Microsoft Office Security Feature Bypass Vulnerability	6.5	30%		Nov 14, 2023

From the original article

2 min read at krebsonsecurity.com

Microsoft today released updates to fix more than five dozen security holes in its Windows operating systems and related software, including three “zero day” vulnerabilities that Microsoft warns are already being exploited in active attacks. The zero-day threats targeting Microsoft this month include CVE-2023-36025 , a weakness that allows malicious content to bypass the Windows SmartScreen Security feature.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.