Microsoft Patch Tuesday for March 2023 — Snort rules and prominent vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-23415 | Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability | 9.8 group max | 3% | ||
| CVE-2023-23392 | HTTP Protocol Stack Remote Code Execution Vulnerability | 9.8 | 2% | ||
| CVE-2023-23397 | Zero-Click Elevation of Privilege in Microsoft Outlook (Forced NTLM Credential Leak) | 9.8 | 97% | KEV | KEV |
| CVE-2023-24880 | SmartScreen Security Feature Bypass in Windows 10/11 and Windows Server | 4.4 | 78% | KEVRansomware | KEV |
From the original article
3 min read at blog.talosintelligence.com
Microsoft released its monthly security update Tuesday, disclosing 83 vulnerabilities across the company’s hardware and software line, including two issues that are actively being exploited in the wild, continuing a trend of zero-days appearing in Patch Tuesdays over the past few months.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.