Exploit / PoCcriticalExploited in the wild

Microsoft patches three exploited zero-days (CVE-2023-21715, CVE-2023-23376, CVE-2023-21823)

Help Net Securityby @zeljkazorzFeb 14, 2023 · 00:00 UTC (Feb 14, 2023)2 min read3 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2023-21715 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-21715 CVE-2023-23376 CVE-2023-21823 CVE-2023-21716

Tags: cve-2023-21715 cve-2023-23376 cve-2023-21823 cve-2023-21716 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-21715 +1 related CVE CVE-2023-21716	Actively Exploited Security Feature Bypass in Microsoft Office Publisher	7.3 group max	12%	KEV	Feb 14, 2023 KEV Feb 14, 2023
CVE-2023-23376 +1 related CVE CVE-2023-21823	Out-of-Bounds Write Privilege Escalation in Microsoft Windows CLFS Driver	7.8	11%	KEVRansomware	Feb 14, 2023 KEV Feb 14, 2023

From the original article

2 min read at helpnetsecurity.com

The February 2023 Patch Tuesday is upon us, with Microsoft releasing patches for 75 CVE-numbered vulnerabilities, including three actively exploited zero-day flaws (CVE-2023-21715, CVE-2023-23376, CVE-2023-21823).

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.