VulnerabilitycriticalExploited in the wild

Microsoft Patch Tuesday, May 2023 Edition

Krebs on SecurityMay 10, 2023 · 07:06 UTC (May 10, 2023)3 min read3

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-29336 CVE-2023-24932 CVE-2023-24941 CVE-2023-28283 CVE-2023-29325

Tags: cve-2023-29336 cve-2023-24932 cve-2023-24941 cve-2023-28283 cve-2023-29325 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-29325 +2 related CVEs CVE-2023-28283 CVE-2023-24932	Windows OLE Remote Code Execution Vulnerability	7.5 group max	84%		May 9, 2023
CVE-2023-24941	Windows Network File System Remote Code Execution Vulnerability	9.8	95%		May 9, 2023
CVE-2023-29336	Use-after-free privilege escalation to SYSTEM in Microsoft Win32k	7.8	41%	KEVPoC	May 9, 2023 KEV May 9, 2023

From the original article

3 min read at krebsonsecurity.com

Microsoft today released software updates to fix at least four dozen security holes in its Windows operating systems and other software, including patches for two zero-day vulnerabilities that are already being exploited in active attacks.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.