Microsoft Patch Tuesday for September 2023 — Unusually low 5 critical vulnerabilities included in Microsoft Patch Tuesday, along with two zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-36744+2 related CVEs | Microsoft Exchange Server Remote Code Execution Vulnerability | 8.0 | 82% | ||
| CVE-2023-36761 | Information Disclosure Flaw in Microsoft Word Actively Exploited (CVE-2023-36761) | 6.5 | 20% | KEV | KEV |
| CVE-2023-36762 | Microsoft Word Remote Code Execution Vulnerability | 7.3 | 1% | ||
CVE-2023-36792+3 related CVEs | Visual Studio Remote Code Execution Vulnerability | 7.8 | 1% | ||
| CVE-2023-36802 | Use-After-Free Privilege Escalation in Microsoft Streaming Service Proxy | 7.8 | 28% | KEV | KEV |
From the original article
2 min read at blog.talosintelligence.com
Microsoft disclosed 65 vulnerabilities across its suite of products and software Tuesday, only five of which are considered critical, which is very low compared to Microsoft’s usual security updates. However, there are two issues disclosed and patched this month that have already been exploited in the wild.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.