cve.bz

Microsoft Patch Tuesday, May 2023: the CVEs

Filter

Microsoft Patch Tuesday May 2023: the CVEs Microsoft published on 9 May 2023, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Apr 2023, Mar 2023, Feb 2023, Jan 2023, Dec 2022, Nov 2022, Oct 2022, Sep 2022, Aug 2022, Jul 2022, Jun 2022, May 2022. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 7.8CVE-2023-29343EPSS 1.8%

    SysInternals Sysmon for Windows Elevation of Privilege Vulnerability

  2. 7.8CVE-2023-29341EPSS 0.7%

    AV1 Video Extension Remote Code Execution Vulnerability

  3. 7.8CVE-2023-29340EPSS 0.7%

    AV1 Video Extension Remote Code Execution Vulnerability

  4. 6.6CVE-2023-29338EPSS 0.9%

    Visual Studio Code Spoofing Vulnerability

  5. 7.8CVE-2023-29336KEVExploitEPSS 41%

    Win32k Elevation of Privilege Vulnerability

  6. 7.5CVE-2023-29335EPSS 1.2%

    Microsoft Word Security Feature Bypass Vulnerability

  7. 3.3CVE-2023-29333EPSS 0.6%

    Microsoft Access Denial of Service Vulnerability

  8. 7.5CVE-2023-29325EPSS 84%

    Windows OLE Remote Code Execution Vulnerability

  9. 6.5CVE-2023-29324EPSS 2.8%

    Windows MSHTML Platform Security Feature Bypass Vulnerability

  10. 5.3CVE-2023-28290EPSS 1.2%

    Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability

  11. 8.1CVE-2023-28283EPSS 1.0%

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  12. 5.5CVE-2023-28251EPSS 0.5%

    Windows Driver Revocation List Security Feature Bypass Vulnerability

  13. 7.2CVE-2023-24955KEVExploitEPSS 85%

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  14. 6.5CVE-2023-24954EPSS 1.8%

    Microsoft SharePoint Server Information Disclosure Vulnerability

  15. 7.8CVE-2023-24953EPSS 0.7%

    Microsoft Excel Remote Code Execution Vulnerability

  16. 6.5CVE-2023-24950EPSS 67%

    Microsoft SharePoint Server Spoofing Vulnerability

  17. 7.8CVE-2023-24949EPSS 25%

    Windows Kernel Elevation of Privilege Vulnerability

  18. 7.4CVE-2023-24948EPSS 1.0%

    Windows Bluetooth Driver Elevation of Privilege Vulnerability

  19. 8.8CVE-2023-24947EPSS 0.7%

    Windows Bluetooth Driver Remote Code Execution Vulnerability

  20. 7.8CVE-2023-24946EPSS 0.4%

    Windows Backup Service Elevation of Privilege Vulnerability

  21. 5.5CVE-2023-24945EPSS 0.6%

    Windows iSCSI Target Service Information Disclosure Vulnerability

  22. 6.5CVE-2023-24944EPSS 0.7%

    Windows Bluetooth Driver Information Disclosure Vulnerability

  23. 9.8CVE-2023-24943EPSS 4.7%

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  24. 7.5CVE-2023-24942EPSS 1.9%

    Remote Procedure Call Runtime Denial of Service Vulnerability

  25. 9.8CVE-2023-24941EPSS 95%

    Windows Network File System Remote Code Execution Vulnerability

  26. 7.5CVE-2023-24940EPSS 5.2%

    Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

  27. 7.5CVE-2023-24939EPSS 4.7%

    Server for NFS Denial of Service Vulnerability

  28. 6.7CVE-2023-24932EPSS 12%

    Secure Boot Security Feature Bypass Vulnerability

  29. 7.8CVE-2023-24905EPSS 0.7%

    Remote Desktop Client Remote Code Execution Vulnerability

  30. 7.1CVE-2023-24904EPSS 0.6%

    Windows Installer Elevation of Privilege Vulnerability

  31. 8.1CVE-2023-24903EPSS 0.9%

    Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  32. 7.8CVE-2023-24902EPSS 5.1%

    Win32k Elevation of Privilege Vulnerability

  33. 7.5CVE-2023-24901EPSS 1.6%

    Windows NFS Portmapper Information Disclosure Vulnerability

  34. 5.9CVE-2023-24900EPSS 1.2%

    Windows NTLM Security Support Provider Information Disclosure Vulnerability

  35. 7.0CVE-2023-24899EPSS 0.3%

    Windows Graphics Component Elevation of Privilege Vulnerability

  36. 7.5CVE-2023-24898EPSS 2.1%

    Windows SMB Denial of Service Vulnerability