cve.bz

Microsoft Patch Tuesday, August 2023: the CVEs

Filter

Microsoft Patch Tuesday August 2023: the CVEs Microsoft published on 8 August 2023, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Jul 2023, Jun 2023, May 2023, Apr 2023, Mar 2023, Feb 2023, Jan 2023, Dec 2022, Nov 2022, Oct 2022, Sep 2022, Aug 2022. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 7.5CVE-2023-38180KEVEPSS 14%

    .NET and Visual Studio Denial of Service Vulnerability

  2. 8.8CVE-2023-36899EPSS 77%

    ASP.NET Elevation of Privilege Vulnerability

  3. 5.9CVE-2023-36873EPSS 1.5%

    .NET Framework Spoofing Vulnerability

  4. 7.5CVE-2023-35391EPSS 1.9%

    ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability

  5. 6.5CVE-2023-38254EPSS 1.6%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  6. 4.5CVE-2023-38188EPSS 1.0%

    Azure Apache Hadoop Spoofing Vulnerability

  7. 9.8CVE-2023-38186EPSS 1.3%

    Windows Mobile Device Management Elevation of Privilege Vulnerability

  8. 8.8CVE-2023-38185EPSS 2.7%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  9. 7.5CVE-2023-38184EPSS 1.5%

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  10. 8.0CVE-2023-38182EPSS 5.9%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  11. 8.8CVE-2023-38181EPSS 11%

    Microsoft Exchange Server Spoofing Vulnerability

  12. 7.5CVE-2023-38178EPSS 2.6%

    .NET Core and Visual Studio Denial of Service Vulnerability

  13. 7.0CVE-2023-38176EPSS 0.4%

    Azure Arc-Enabled Servers Elevation of Privilege Vulnerability

  14. 7.8CVE-2023-38175EPSS 0.5%

    Microsoft Windows Defender Elevation of Privilege Vulnerability

  15. 7.5CVE-2023-38172EPSS 2.0%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  16. 7.8CVE-2023-38170EPSS 0.7%

    HEVC Video Extensions Remote Code Execution Vulnerability

  17. 8.8CVE-2023-38169EPSS 1.3%

    Microsoft SQL OLE DB Remote Code Execution Vulnerability

  18. 7.2CVE-2023-38167EPSS 1.4%

    Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

  19. 7.8CVE-2023-38154EPSS 0.8%

    Windows Kernel Elevation of Privilege Vulnerability

  20. 5.5CVE-2023-36914EPSS 0.6%

    Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability

  21. 7.5CVE-2023-36913EPSS 1.7%

    Microsoft Message Queuing Information Disclosure Vulnerability

  22. 7.5CVE-2023-36912EPSS 2.1%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  23. 9.8CVE-2023-36911EPSS 1.7%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  24. 9.8CVE-2023-36910EPSS 2.5%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  25. 6.5CVE-2023-36909EPSS 2.1%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  26. 6.5CVE-2023-36908EPSS 1.0%

    Windows Hyper-V Information Disclosure Vulnerability

  27. 7.5CVE-2023-36907EPSS 1.7%

    Windows Cryptographic Services Information Disclosure Vulnerability

  28. 7.5CVE-2023-36906EPSS 2.0%

    Windows Cryptographic Services Information Disclosure Vulnerability

  29. 7.5CVE-2023-36905EPSS 1.7%

    Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

  30. 7.8CVE-2023-36904EPSS 0.6%

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

  31. 9.8CVE-2023-36903EPSS 1.6%

    Windows System Assessment Tool Elevation of Privilege Vulnerability

  32. 7.8CVE-2023-36900EPSS 10%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  33. 7.8CVE-2023-36898EPSS 0.7%

    Tablet Windows User Interface Application Core Remote Code Execution Vulnerability

  34. 6.5CVE-2023-36897EPSS 1.7%

    Visual Studio Tools for Office Runtime Spoofing Vulnerability

  35. 7.8CVE-2023-36896EPSS 1.0%

    Microsoft Excel Remote Code Execution Vulnerability

  36. 7.8CVE-2023-36895EPSS 1.0%

    Microsoft Outlook Remote Code Execution Vulnerability

  37. 6.5CVE-2023-36894EPSS 2.1%

    Microsoft SharePoint Server Information Disclosure Vulnerability

  38. 6.5CVE-2023-36893EPSS 2.2%

    Microsoft Outlook Spoofing Vulnerability

  39. 8.0CVE-2023-36892EPSS 2.0%

    Microsoft SharePoint Server Spoofing Vulnerability

  40. 8.0CVE-2023-36891EPSS 2.0%

    Microsoft SharePoint Server Spoofing Vulnerability

  41. 6.5CVE-2023-36890EPSS 1.9%

    Microsoft SharePoint Server Information Disclosure Vulnerability

  42. 5.5CVE-2023-36889EPSS 0.6%

    Windows Group Policy Security Feature Bypass Vulnerability

  43. 8.8CVE-2023-36882EPSS 1.4%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  44. 4.5CVE-2023-36881EPSS 1.0%

    Azure Apache Ambari Spoofing Vulnerability

  45. 4.5CVE-2023-36877EPSS 1.0%

    Azure Apache Oozie Spoofing Vulnerability

  46. 7.1CVE-2023-36876EPSS 0.5%

    Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability

  47. 6.3CVE-2023-36869EPSS 0.7%

    Azure DevOps Server Spoofing Vulnerability

  48. 7.8CVE-2023-36866EPSS 0.8%

    Microsoft Office Visio Remote Code Execution Vulnerability

  49. 7.8CVE-2023-36865EPSS 0.8%

    Microsoft Office Visio Remote Code Execution Vulnerability

  50. 4.6CVE-2023-35394EPSS 1.0%

    Azure HDInsight Jupyter Notebook Spoofing Vulnerability

  51. 4.5CVE-2023-35393EPSS 1.4%

    Azure Apache Hive Spoofing Vulnerability

  52. 7.8CVE-2023-35390EPSS 2.1%

    .NET and Visual Studio Remote Code Execution Vulnerability

  53. 6.5CVE-2023-35389EPSS 0.8%

    Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

  54. 8.0CVE-2023-35388EPSS 6.8%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  55. 8.8CVE-2023-35387EPSS 1.1%

    Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability

  56. 7.8CVE-2023-35386EPSS 5.5%

    Windows Kernel Elevation of Privilege Vulnerability

  57. 9.8CVE-2023-35385EPSS 2.5%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  58. 6.5CVE-2023-35384EPSS 1.6%

    Windows HTML Platforms Security Feature Bypass Vulnerability

  59. 7.5CVE-2023-35383EPSS 3.0%

    Microsoft Message Queuing Information Disclosure Vulnerability

  60. 7.8CVE-2023-35382EPSS 5.6%

    Windows Kernel Elevation of Privilege Vulnerability

  61. 8.8CVE-2023-35381EPSS 1.9%

    Windows Fax Service Remote Code Execution Vulnerability

  62. 7.8CVE-2023-35380EPSS 3.6%

    Windows Kernel Elevation of Privilege Vulnerability

  63. 7.8CVE-2023-35379EPSS 0.6%

    Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability

  64. 7.0CVE-2023-35378EPSS 0.4%

    Windows Projected File System Elevation of Privilege Vulnerability

  65. 6.5CVE-2023-35377EPSS 2.2%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  66. 6.5CVE-2023-35376EPSS 2.2%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  67. 7.8CVE-2023-35372EPSS 1.0%

    Microsoft Office Visio Remote Code Execution Vulnerability

  68. 7.8CVE-2023-35371EPSS 1.0%

    Microsoft Office Remote Code Execution Vulnerability

  69. 8.8CVE-2023-35368EPSS 2.5%

    Microsoft Exchange Remote Code Execution Vulnerability

  70. 7.8CVE-2023-35359EPSS 9.9%

    Windows Kernel Elevation of Privilege Vulnerability

  71. 8.8CVE-2023-29330EPSS 2.0%

    Microsoft Teams Remote Code Execution Vulnerability

  72. 8.8CVE-2023-29328EPSS 2.2%

    Microsoft Teams Remote Code Execution Vulnerability

  73. 9.8CVE-2023-21709EPSS 2.0%

    Microsoft Exchange Server Elevation of Privilege Vulnerability

  74. 5.5CVE-2023-20588EPSS 11%

    A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.