Microsoft Patch Tuesday, July 2023: the CVEs

Microsoft Patch Tuesday July 2023: the CVEs Microsoft published on 11 July 2023, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Jun 2023, May 2023, Apr 2023, Mar 2023, Feb 2023, Jan 2023, Dec 2022, Nov 2022, Oct 2022, Sep 2022, Aug 2022, Jul 2022. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 7.5CVE-2023-36884KEVEPSS 99.4%2023-07-11

   Windows Search Remote Code Execution Vulnerability

2. 7.8CVE-2023-36874KEVExploitEPSS 44%2023-07-11

   Windows Error Reporting Service Elevation of Privilege Vulnerability

3. 5.5CVE-2023-36872EPSS 0.8%2023-07-11

   VP9 Video Extensions Information Disclosure Vulnerability

4. 6.5CVE-2023-36871EPSS 1.2%2023-07-11

   Azure Active Directory Security Feature Bypass Vulnerability

5. 6.5CVE-2023-36868EPSS 0.7%2023-07-11

   Azure Service Fabric on Windows Information Disclosure Vulnerability

6. 7.8CVE-2023-35374EPSS 0.7%2023-07-11

   Paint 3D Remote Code Execution Vulnerability

7. 5.3CVE-2023-35373EPSS 0.8%2023-07-11

   Mono Authenticode Validation Spoofing Vulnerability

8. 9.8CVE-2023-35367EPSS 1.7%2023-07-11

   Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

9. 9.8CVE-2023-35366EPSS 1.7%2023-07-11

   Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

10. 9.8CVE-2023-35365EPSS 1.8%2023-07-11

    Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

11. 8.8CVE-2023-35364EPSS 0.5%2023-07-11

    Windows Kernel Elevation of Privilege Vulnerability

12. 7.8CVE-2023-35363EPSS 0.5%2023-07-11

    Windows Kernel Elevation of Privilege Vulnerability

13. 7.8CVE-2023-35362EPSS 0.3%2023-07-11

    Windows Clip Service Elevation of Privilege Vulnerability

14. 7.0CVE-2023-35361EPSS 0.3%2023-07-11

    Windows Kernel Elevation of Privilege Vulnerability

15. 7.0CVE-2023-35360EPSS 0.3%2023-07-11

    Windows Kernel Elevation of Privilege Vulnerability

16. 7.8CVE-2023-35358EPSS 0.9%2023-07-11

    Windows Kernel Elevation of Privilege Vulnerability

17. 7.8CVE-2023-35357EPSS 0.9%2023-07-11

    Windows Kernel Elevation of Privilege Vulnerability

18. 7.8CVE-2023-35356EPSS 1.2%2023-07-11

    Windows Kernel Elevation of Privilege Vulnerability

19. 7.8CVE-2023-35353EPSS 0.5%2023-07-11

    Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

20. 7.5CVE-2023-35352EPSS 1.4%2023-07-11

    Windows Remote Desktop Security Feature Bypass Vulnerability

21. 6.6CVE-2023-35351EPSS 0.7%2023-07-11

    Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

22. 7.2CVE-2023-35350EPSS 1.2%2023-07-11

    Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

23. 6.5CVE-2023-35348EPSS 1.0%2023-07-11

    Active Directory Federation Service Security Feature Bypass Vulnerability

24. 7.1CVE-2023-35347EPSS 0.5%2023-07-11

    Microsoft Install Service Elevation of Privilege Vulnerability

25. 6.6CVE-2023-35346EPSS 0.7%2023-07-11

    Windows DNS Server Remote Code Execution Vulnerability

26. 6.6CVE-2023-35345EPSS 0.7%2023-07-11

    Windows DNS Server Remote Code Execution Vulnerability

27. 6.6CVE-2023-35344EPSS 0.7%2023-07-11

    Windows DNS Server Remote Code Execution Vulnerability

28. 7.8CVE-2023-35343EPSS 0.7%2023-07-11

    Windows Geolocation Service Remote Code Execution Vulnerability

29. 7.8CVE-2023-35342EPSS 0.5%2023-07-11

    Windows Image Acquisition Elevation of Privilege Vulnerability

30. 5.5CVE-2023-35341EPSS 0.5%2023-07-11

    Microsoft DirectMusic Information Disclosure Vulnerability

31. 7.8CVE-2023-35340EPSS 0.3%2023-07-11

    Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

32. 7.5CVE-2023-35339EPSS 1.9%2023-07-11

    Windows CryptoAPI Denial of Service Vulnerability

33. 7.5CVE-2023-35338EPSS 2.0%2023-07-11

    Windows Peer Name Resolution Protocol Denial of Service Vulnerability

34. 7.8CVE-2023-35337EPSS 0.4%2023-07-11

    Win32k Elevation of Privilege Vulnerability

35. 5.4CVE-2023-35336EPSS 0.9%2023-07-11

    Windows MSHTML Platform Security Feature Bypass Vulnerability

36. 8.2CVE-2023-35335EPSS 0.8%2023-07-11

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

37. 7.5CVE-2023-35333EPSS 1.2%2023-07-11

    MediaWiki PandocUpload Extension Remote Code Execution Vulnerability

38. 6.8CVE-2023-35332EPSS 0.5%2023-07-11

    Windows Remote Desktop Protocol Security Feature Bypass

39. 6.5CVE-2023-35331EPSS 0.7%2023-07-11

    Windows Local Security Authority (LSA) Denial of Service Vulnerability

40. 7.5CVE-2023-35330EPSS 1.9%2023-07-11

    Windows Extended Negotiation Denial of Service Vulnerability

41. 6.5CVE-2023-35329EPSS 1.8%2023-07-11

    Windows Authentication Denial of Service Vulnerability

42. 7.8CVE-2023-35328EPSS 0.4%2023-07-11

    Windows Transaction Manager Elevation of Privilege Vulnerability

43. 5.5CVE-2023-35326EPSS 0.5%2023-07-11

    Windows CDP User Components Information Disclosure Vulnerability

44. 7.5CVE-2023-35325EPSS 1.8%2023-07-11

    Windows Print Spooler Information Disclosure Vulnerability

45. 5.5CVE-2023-35324EPSS 0.5%2023-07-11

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

46. 7.8CVE-2023-35323EPSS 0.7%2023-07-11

    Windows OLE Remote Code Execution Vulnerability

47. 8.8CVE-2023-35322EPSS 1.4%2023-07-11

    Windows Deployment Services Remote Code Execution Vulnerability

48. 6.5CVE-2023-35321EPSS 1.6%2023-07-11

    Windows Deployment Services Denial of Service Vulnerability

49. 7.8CVE-2023-35320EPSS 0.5%2023-07-11

    Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

50. 6.5CVE-2023-35319EPSS 1.6%2023-07-11

    Remote Procedure Call Runtime Denial of Service Vulnerability

51. 6.5CVE-2023-35318EPSS 1.6%2023-07-11

    Remote Procedure Call Runtime Denial of Service Vulnerability

52. 7.8CVE-2023-35317EPSS 1.4%2023-07-11

    Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

53. 6.5CVE-2023-35316EPSS 1.4%2023-07-11

    Remote Procedure Call Runtime Information Disclosure Vulnerability

54. 8.8CVE-2023-35315EPSS 0.7%2023-07-11

    Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

55. 6.5CVE-2023-35314EPSS 1.6%2023-07-11

    Remote Procedure Call Runtime Denial of Service Vulnerability

56. 7.8CVE-2023-35313EPSS 0.7%2023-07-11

    Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability

57. 7.8CVE-2023-35312EPSS 0.5%2023-07-11

    Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability

58. 8.8CVE-2023-35311KEVEPSS 16%2023-07-11

    Microsoft Outlook Security Feature Bypass Vulnerability

59. 6.6CVE-2023-35310EPSS 0.7%2023-07-11

    Windows DNS Server Remote Code Execution Vulnerability

60. 7.5CVE-2023-35309EPSS 0.8%2023-07-11

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

61. 6.5CVE-2023-35308EPSS 1.1%2023-07-11

    Windows MSHTML Platform Security Feature Bypass Vulnerability

62. 5.5CVE-2023-35306EPSS 0.5%2023-07-11

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

63. 7.8CVE-2023-35305EPSS 0.4%2023-07-11

    Windows Kernel Elevation of Privilege Vulnerability

64. 7.8CVE-2023-35304EPSS 0.4%2023-07-11

    Windows Kernel Elevation of Privilege Vulnerability

65. 8.8CVE-2023-35303EPSS 1.5%2023-07-11

    USB Audio Class System Driver Remote Code Execution Vulnerability

66. 8.8CVE-2023-35302EPSS 1.4%2023-07-11

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

67. 8.8CVE-2023-35300EPSS 1.4%2023-07-11

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

68. 7.8CVE-2023-35299EPSS 0.4%2023-07-11

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

69. 7.5CVE-2023-35298EPSS 1.8%2023-07-11

    HTTP.sys Denial of Service Vulnerability

70. 8.1CVE-2023-35297EPSS 1.1%2023-07-11

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

71. 6.5CVE-2023-35296EPSS 1.5%2023-07-11

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

72. 5.5CVE-2023-33174EPSS 0.7%2023-07-11

    Windows Cryptographic Information Disclosure Vulnerability

73. 7.5CVE-2023-33173EPSS 1.6%2023-07-11

    Remote Procedure Call Runtime Denial of Service Vulnerability

74. 7.5CVE-2023-33172EPSS 1.6%2023-07-11

    Remote Procedure Call Runtime Denial of Service Vulnerability

75. 6.1CVE-2023-33171EPSS 0.7%2023-07-11

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

76. 8.1CVE-2023-33170EPSS 2.0%2023-07-11

    ASP.NET and Visual Studio Security Feature Bypass Vulnerability

77. 7.5CVE-2023-33169EPSS 1.6%2023-07-11

    Remote Procedure Call Runtime Denial of Service Vulnerability

78. 7.5CVE-2023-33168EPSS 1.6%2023-07-11

    Remote Procedure Call Runtime Denial of Service Vulnerability

79. 7.5CVE-2023-33167EPSS 1.6%2023-07-11

    Remote Procedure Call Runtime Denial of Service Vulnerability

80. 7.5CVE-2023-33166EPSS 1.6%2023-07-11

    Remote Procedure Call Runtime Denial of Service Vulnerability

81. 7.5CVE-2023-33165EPSS 1.1%2023-07-11

    Microsoft SharePoint Server Security Feature Bypass Vulnerability

82. 6.5CVE-2023-33164EPSS 1.6%2023-07-11

    Remote Procedure Call Runtime Denial of Service Vulnerability

83. 7.5CVE-2023-33163EPSS 0.4%2023-07-11

    Windows Network Load Balancing Remote Code Execution Vulnerability

84. 5.5CVE-2023-33162EPSS 0.8%2023-07-11

    Microsoft Excel Information Disclosure Vulnerability

85. 7.8CVE-2023-33161EPSS 0.6%2023-07-11

    Microsoft Excel Remote Code Execution Vulnerability

86. 8.8CVE-2023-33160EPSS 4.3%2023-07-11

    Microsoft SharePoint Server Remote Code Execution Vulnerability

87. 8.8CVE-2023-33159EPSS 1.3%2023-07-11

    Microsoft SharePoint Server Spoofing Vulnerability

88. 7.8CVE-2023-33158EPSS 0.6%2023-07-11

    Microsoft Excel Remote Code Execution Vulnerability

89. 8.8CVE-2023-33157EPSS 38%2023-07-11

    Microsoft SharePoint Remote Code Execution Vulnerability

90. 7.0CVE-2023-33156EPSS 0.3%2023-07-11

    Microsoft Defender Elevation of Privilege Vulnerability

91. 7.8CVE-2023-33155EPSS 0.4%2023-07-11

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

92. 9.8CVE-2023-33154EPSS 0.8%2023-07-11

    Windows Partition Management Driver Elevation of Privilege Vulnerability

93. 8.8CVE-2023-33153EPSS 1.0%2023-07-11

    Microsoft Outlook Remote Code Execution Vulnerability

94. 7.8CVE-2023-33152EPSS 0.5%2023-07-11

    Microsoft ActiveX Remote Code Execution Vulnerability

95. 6.5CVE-2023-33151EPSS 3.4%2023-07-11

    Microsoft Outlook Spoofing Vulnerability

96. 9.6CVE-2023-33150EPSS 2.1%2023-07-11

    Microsoft Office Security Feature Bypass Vulnerability

97. 7.8CVE-2023-33149EPSS 0.6%2023-07-11

    Microsoft Office Graphics Remote Code Execution Vulnerability

98. 7.8CVE-2023-33148ExploitEPSS 2.1%2023-07-11

    Microsoft Office Elevation of Privilege Vulnerability

99. 8.8CVE-2023-33134EPSS 2.6%2023-07-11

    Microsoft SharePoint Server Remote Code Execution Vulnerability

100. 8.1CVE-2023-33127EPSS 1.9%2023-07-11

     .NET and Visual Studio Elevation of Privilege Vulnerability