Six critical vulnerabilities included in August’s Microsoft security update
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-29328+1 related CVE | Microsoft Teams Remote Code Execution Vulnerability | 8.8 | 2% | ||
CVE-2023-35385+4 related CVEs | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | 9.8 group max | 2% | ||
CVE-2023-38185+3 related CVEs | Microsoft Exchange Server Remote Code Execution Vulnerability | 8.8 group max | 3% | ||
| CVE-2023-36895 | Microsoft Outlook Remote Code Execution Vulnerability | 7.8 | 1% | ||
CVE-2023-36910+2 related CVEs | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability | 9.8 group max | 3% | ||
| CVE-2023-38180 | Unauthenticated DoS in Microsoft .NET, ASP.NET Core and Visual Studio 2022 | 7.5 | 14% | KEV | KEV |
From the original article
3 min read at blog.talosintelligence.com
Microsoft disclosed 73 vulnerabilities across its suite of products and software Tuesday, including six that are considered “critical.” One of the vulnerabilities, which Microsoft considers to be only of "moderate" severity, has been actively exploited in the wild. The company has had to address many zero-day vulnerabilities in its monthly security updates this year, including four last month and one in May .
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.