Microsoft Rolls Out Patches for 80 New Security Flaws — Two Under Active Attack
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-44698 | SmartScreen Security Feature Bypass in Windows 10/11 and Windows Server | 5.4 | 76% | KEVRansomware | KEV |
CVE-2023-1017+1 related CVE | An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the… | 7.8 group max | 1% | ||
CVE-2023-23415+1 related CVE | Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability | 9.8 | 3% | ||
| CVE-2023-23391 | Office for Android Spoofing Vulnerability | 5.5 | <1% | ||
| CVE-2023-23392 | HTTP Protocol Stack Remote Code Execution Vulnerability | 9.8 | 2% | ||
| CVE-2023-23397 | Zero-Click Elevation of Privilege in Microsoft Outlook (Forced NTLM Credential Leak) | 9.8 | 97% | KEV | KEV |
| CVE-2023-24880 | SmartScreen Security Feature Bypass in Windows 10/11 and Windows Server | 4.4 | 78% | KEVRansomware | KEV |
CVE-2023-24930+3 related CVEs | Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability | 7.8 group max | <1% |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Mar 15, 2023 Patch Tuesday / Software Update Microsoft's Patch Tuesday update for March 2023 is rolling out with remediations for a set of 80 security flaws , two of which have come under active exploitation in the wild. Eight of the 80 bugs are rated Critical, 71 are rated Important, and one is rated Moderate in severity.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.