Vulnerabilitycritical
Patch Tuesday, October 2023 Edition
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-35349 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | 9.8 | 3% | ||
| CVE-2023-36563 | Information Disclosure in Microsoft WordPad Exploited in the Wild | 5.5 | 20% | KEV | KEV |
| CVE-2023-36778 | Microsoft Exchange Server Remote Code Execution Vulnerability | 8.0 | 4% | ||
| CVE-2023-41763 | Unauthenticated SSRF/Elevation-of-Privilege Flaw in Microsoft Skype for Business Server | 5.3 | 91% | KEV | KEV |
| CVE-2023-42724 | In gpu driver, there is a possible out of bounds read due to a missing bounds check | 4.4 | <1% | ||
| CVE-2023-44487 | Rapid Reset Denial-of-Service in HTTP/2 (CWE-400 Resource Exhaustion) | 7.5 | 100% | KEV | KEV |
| CVE-2023-5217 | Heap Buffer Overflow in Google Chromium libvpx (CVE-2023-5217) Added to CISA KEV | 8.8 | 49% | KEVPoC | KEV |
From the original article
3 min read at krebsonsecurity.comMicrosoft today issued security updates for more than 100 newly-discovered vulnerabilities in its Windows operating system and related software, including four flaws that are already being exploited. In addition, Apple recently released emergency updates to quash a pair of zero-day bugs in iOS . Apple last week shipped emergency updates in iOS 17.
krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.