CISA warns of attacks using Microsoft Word, Adobe bugs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-26369 | Out-of-Bounds Write RCE in Adobe Acrobat and Reader via Malicious PDFs | 7.8 | 7% | KEV | KEV |
| CVE-2023-36761 | Information Disclosure Flaw in Microsoft Word Actively Exploited (CVE-2023-36761) | 6.5 | 20% | KEV | KEV |
| CVE-2023-36802 | Use-After-Free Privilege Escalation in Microsoft Streaming Service Proxy | 7.8 | 28% | KEV | KEV |
From the original article
3 min read at therecord.media
The federal government is urging IT administrators to fix several vulnerabilities disclosed in Microsoft’s latest batch of Patch Tuesday bugs, including two critical issues that are actively being exploited by hackers. Overall, Microsoft disclosed 59 bugs , including zero-day vulnerabilities related to Microsoft Word (CVE-2023-36761) and Microsoft Streaming Service Proxy (CVE-2023-36802).
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.