Microsoft Fixes Six Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-32049+3 related CVEs | Windows SmartScreen Security Feature Bypass Exploited in the Wild (CVE-2023-32049) | 8.8 group max | 4% | KEV | KEV |
| CVE-2023-35311 | TOCTOU Security Feature Bypass in Microsoft Outlook (Exploited in the Wild) | 8.8 | 16% | KEV | KEV |
From the original article
2 min read at infosecurity-magazine.com
Microsoft issued a record-breaking 132 new fixes for vulnerabilities this month and detailed six zero-day bugs, including one being actively exploited in attacks against NATO members. Of the massive haul, nine CVEs were rated “critical,” 37 were remote code execution (RCE) flaws and 33 were elevation of privilege bugs. Read more on zero-day flaws: Microsoft Fixes Zero-Day Bug This Patch Tuesday
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.