Microsoft Patch Tuesday for April 2023 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-37969 | Out-of-bounds write flaw in Microsoft Windows CLFS driver enables privilege escalation | 7.8 | 28% | KEVRansomware | KEV |
| CVE-2023-21554 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | 9.8 | 95% | ||
CVE-2023-28250+3 related CVEs | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability | 9.8 group max | 2% | ||
CVE-2023-28231+1 related CVE | DHCP Server Service Remote Code Execution Vulnerability | 8.8 | 37% | ||
| CVE-2023-28252 | Heap Overflow in Microsoft Windows CLFS Driver Enables Local Privilege Escalation | 7.8 | 49% | KEVRansomwarePoC | KEV |
| CVE-2023-28291 | Raw Image Extension Remote Code Execution Vulnerability | 7.8 | <1% |
From the original article
2 min read at blog.talosintelligence.com
Microsoft released its monthly round of security updates and patches today, continuing its trend of fixing zero-day vulnerabilities on Patch Tuesday. April's security update includes one vulnerability that’s actively being exploited in the wild. There are also eight critical vulnerabilities and the remaining 90 are considered “important.”
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.