Microsoft Patches Three Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-21715 | Actively Exploited Security Feature Bypass in Microsoft Office Publisher | 7.3 | 12% | KEV | KEV |
CVE-2023-23376+1 related CVE | Out-of-Bounds Write Privilege Escalation in Microsoft Windows CLFS Driver | 7.8 | 11% | KEVRansomware | KEV |
From the original article
1 min read at infosecurity-magazine.com
Microsoft released patches for over 70 CVEs this month, including three zero-day vulnerabilities currently being exploited in the wild. The first of these is CVE-2023-23376 , an elevation of privilege flaw in the Common Log File System (CLFS) Driver. Tenable senior staff research engineer, Satnam Narang, explained that Redmond patched two similar flaws in the CLFS Driver in April and September 2022.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.