Exploit / PoCcritical
Microsoft Fixes 34 CVEs and One Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-20588 | A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality | 5.5 | 11% | ||
CVE-2023-35628+2 related CVEs | Windows MSHTML Platform Remote Code Execution Vulnerability | 8.1 group max | 93% | ||
| CVE-2023-36019 | Microsoft Power Platform Connector Spoofing Vulnerability | 7.4 | 16% |
From the original article
1 min read at infosecurity-magazine.com
Microsoft ended the year with a relatively light patch-load, issuing updates for 34 vulnerabilities including one zero-day first reported back in August. CVE-2023-20588 is a “division-by-zero” vulnerability affecting specific AMD processors that can “potentially return speculative data resulting in loss of confidentiality.”
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.