Alert: Microsoft Releases Patch Updates for 5 New Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-44698 | SmartScreen Security Feature Bypass in Windows 10/11 and Windows Server | 5.4 | 75% | KEVRansomware | KEV |
| CVE-2023-24880 | SmartScreen Security Feature Bypass in Windows 10/11 and Windows Server | 4.4 | 78% | KEVRansomware | KEV |
| CVE-2023-32049 | Windows SmartScreen Security Feature Bypass Exploited in the Wild (CVE-2023-32049) | 8.8 | 4% | KEV | KEV |
CVE-2023-36025+2 related CVEs | Windows SmartScreen Bypass (CVE-2023-36025) Exploited via Crafted Shortcut Files | 8.8 group max | 88% | KEV | KEV |
CVE-2023-36397+1 related CVE | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability | 9.8 | 18% | ||
| CVE-2023-36038 | ASP.NET Core Denial of Service Vulnerability | 7.5 | 3% | ||
| CVE-2023-36052 | Azure CLI REST Command Information Disclosure Vulnerability | 8.6 | 21% | ||
| CVE-2023-36413 | Microsoft Office Security Feature Bypass Vulnerability | 6.5 | 30% | ||
| CVE-2023-38545 | This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake | 9.8 | 78% |
From the original article
3 min read at thehackernews.com
Microsoft has released fixes to address 63 security bugs in its software for the month of November 2023, including three vulnerabilities that have come under active exploitation in the wild. Of the 63 flaws, three are rated Critical, 56 are rated Important, and four are rated Moderate in severity. Two of them have been listed as publicly known at the time of the release.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.