Microsoft's May Patch Tuesday Fixes 38 Flaws, Including 2 Exploited Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-21894 | Secure Boot Security Feature Bypass Vulnerability | 4.4 | 7% | ||
CVE-2023-29325+1 related CVE | Windows OLE Remote Code Execution Vulnerability | 7.5 group max | 84% | ||
| CVE-2023-29336 | Use-after-free privilege escalation to SYSTEM in Microsoft Win32k | 7.8 | 41% | KEVPoC | KEV |
From the original article
3 min read at thehackernews.com
Microsoft has rolled out Patch Tuesday updates for May 2023 to address 38 security flaws, including two zero-day bugs that it said are being actively exploited in the wild. Trend Micro's Zero Day Initiative (ZDI) said the volume is the lowest since August 2021, although it pointed out that "this number is expected to rise in the coming months."
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.