Microsoft Releases October 2023 Patches for 103 Flaws, Including 2 Active Exploits
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-36434 | Windows IIS Server Elevation of Privilege Vulnerability | 9.8 | 2% | ||
| CVE-2023-36563 | Information Disclosure in Microsoft WordPad Exploited in the Wild | 5.5 | 20% | KEV | KEV |
| CVE-2023-41763 | Unauthenticated SSRF/Elevation-of-Privilege Flaw in Microsoft Skype for Business Server | 5.3 | 91% | KEV | KEV |
| CVE-2023-44487 | Rapid Reset Denial-of-Service in HTTP/2 (CWE-400 Resource Exhaustion) | 7.5 | 100% | KEV | KEV |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Oct 11, 2023 Vulnerability / Endpoint Security Microsoft has released its Patch Tuesday updates for October 2023, addressing a total of 103 flaws in its software, two of which have come under active exploitation in the wild. Of the 103 flaws, 13 are rated Critical and 90 are rated Important in severity.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.