Microsoft Patch Tuesday, September 2023: the CVEs

Microsoft Patch Tuesday September 2023: the CVEs Microsoft published on 12 September 2023, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Aug 2023, Jul 2023, Jun 2023, May 2023, Apr 2023, Mar 2023, Feb 2023, Jan 2023, Dec 2022, Nov 2022, Oct 2022, Sep 2022. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 5.5CVE-2023-41764EPSS 1.0%2023-09-12

   Microsoft Office Spoofing Vulnerability

2. 5.4CVE-2023-38164EPSS 0.9%2023-09-12

   Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

3. 7.8CVE-2023-38163EPSS 0.7%2023-09-12

   Windows Defender Attack Surface Reduction Security Feature Bypass

4. 7.5CVE-2023-38162EPSS 11%2023-09-12

   DHCP Server Service Denial of Service Vulnerability

5. 7.8CVE-2023-38161EPSS 0.6%2023-09-12

   Windows GDI Elevation of Privilege Vulnerability

6. 5.5CVE-2023-38160EPSS 0.9%2023-09-12

   Windows TCP/IP Information Disclosure Vulnerability

7. 7.2CVE-2023-38156EPSS 2.0%2023-09-12

   Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability

8. 8.1CVE-2023-38155EPSS 1.3%2023-09-12

   Azure DevOps Server Remote Code Execution Vulnerability

9. 5.3CVE-2023-38152EPSS 24%2023-09-12

   DHCP Server Service Information Disclosure Vulnerability

10. 7.8CVE-2023-38150EPSS 0.6%2023-09-12

    Windows Kernel Elevation of Privilege Vulnerability

11. 7.5CVE-2023-38149EPSS 4.5%2023-09-12

    Windows TCP/IP Denial of Service Vulnerability

12. 8.8CVE-2023-38148EPSS 7.7%2023-09-12

    Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

13. 8.8CVE-2023-38147EPSS 0.9%2023-09-12

    Windows Miracast Wireless Display Remote Code Execution Vulnerability

14. 8.8CVE-2023-38146ExploitEPSS 37%2023-09-12

    Windows Themes Remote Code Execution Vulnerability

15. 7.8CVE-2023-38144EPSS 3.4%2023-09-12

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

16. 7.8CVE-2023-38143EPSS 3.4%2023-09-12

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

17. 7.8CVE-2023-38142EPSS 5.6%2023-09-12

    Windows Kernel Elevation of Privilege Vulnerability

18. 7.8CVE-2023-38141EPSS 0.6%2023-09-12

    Windows Kernel Elevation of Privilege Vulnerability

19. 5.5CVE-2023-38140EPSS 1.1%2023-09-12

    Windows Kernel Information Disclosure Vulnerability

20. 7.8CVE-2023-38139EPSS 0.9%2023-09-12

    Windows Kernel Elevation of Privilege Vulnerability

21. 5.4CVE-2023-36886EPSS 1.0%2023-09-12

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

22. 7.0CVE-2023-36805EPSS 1.8%2023-09-12

    Windows MSHTML Platform Security Feature Bypass Vulnerability

23. 7.8CVE-2023-36804EPSS 0.6%2023-09-12

    Windows GDI Elevation of Privilege Vulnerability

24. 5.5CVE-2023-36803EPSS 1.0%2023-09-12

    Windows Kernel Information Disclosure Vulnerability

25. 7.8CVE-2023-36802KEVEPSS 28%2023-09-12

    Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

26. 5.3CVE-2023-36801EPSS 1.6%2023-09-12

    DHCP Server Service Information Disclosure Vulnerability

27. 5.4CVE-2023-36800EPSS 0.8%2023-09-12

    Dynamics Finance and Operations Cross-site Scripting Vulnerability

28. 6.5CVE-2023-36799EPSS 4.6%2023-09-12

    .NET Core and Visual Studio Denial of Service Vulnerability

29. 7.8CVE-2023-36796EPSS 1.2%2023-09-12

    Visual Studio Remote Code Execution Vulnerability

30. 7.8CVE-2023-36794EPSS 1.2%2023-09-12

    Visual Studio Remote Code Execution Vulnerability

31. 7.8CVE-2023-36793EPSS 1.2%2023-09-12

    Visual Studio Remote Code Execution Vulnerability

32. 7.8CVE-2023-36792EPSS 1.2%2023-09-12

    Visual Studio Remote Code Execution Vulnerability

33. 7.8CVE-2023-36788EPSS 1.0%2023-09-12

    .NET Framework Remote Code Execution Vulnerability

34. 5.7CVE-2023-36777EPSS 52%2023-09-12

    Microsoft Exchange Server Information Disclosure Vulnerability

35. 7.8CVE-2023-36773EPSS 0.7%2023-09-12

    3D Builder Remote Code Execution Vulnerability

36. 7.8CVE-2023-36772EPSS 0.7%2023-09-12

    3D Builder Remote Code Execution Vulnerability

37. 7.8CVE-2023-36771EPSS 0.7%2023-09-12

    3D Builder Remote Code Execution Vulnerability

38. 7.8CVE-2023-36770EPSS 0.7%2023-09-12

    3D Builder Remote Code Execution Vulnerability

39. 4.3CVE-2023-36767EPSS 3.1%2023-09-12

    Microsoft Office Security Feature Bypass Vulnerability

40. 5.5CVE-2023-36766EPSS 1.2%2023-09-12

    Microsoft Excel Information Disclosure Vulnerability

41. 9.8CVE-2023-36765EPSS 1.0%2023-09-12

    Microsoft Office Elevation of Privilege Vulnerability

42. 8.8CVE-2023-36764EPSS 2.1%2023-09-12

    Microsoft SharePoint Server Elevation of Privilege Vulnerability

43. 7.5CVE-2023-36763EPSS 2.1%2023-09-12

    Microsoft Outlook Information Disclosure Vulnerability

44. 7.3CVE-2023-36762EPSS 0.8%2023-09-12

    Microsoft Word Remote Code Execution Vulnerability

45. 6.5CVE-2023-36761KEVEPSS 20%2023-09-12

    Microsoft Word Information Disclosure Vulnerability

46. 7.8CVE-2023-36760EPSS 0.7%2023-09-12

    3D Viewer Remote Code Execution Vulnerability

47. 6.7CVE-2023-36759EPSS 0.5%2023-09-12

    Visual Studio Elevation of Privilege Vulnerability

48. 9.8CVE-2023-36758EPSS 1.3%2023-09-12

    Visual Studio Elevation of Privilege Vulnerability

49. 8.0CVE-2023-36757EPSS 37%2023-09-12

    Microsoft Exchange Server Spoofing Vulnerability

50. 8.0CVE-2023-36756EPSS 49%2023-09-12

    Microsoft Exchange Server Remote Code Execution Vulnerability

51. 8.0CVE-2023-36745EPSS 76%2023-09-12

    Microsoft Exchange Server Remote Code Execution Vulnerability

52. 8.0CVE-2023-36744EPSS 57%2023-09-12

    Microsoft Exchange Server Remote Code Execution Vulnerability

53. 7.8CVE-2023-36742EPSS 1.0%2023-09-12

    Visual Studio Code Remote Code Execution Vulnerability

54. 7.8CVE-2023-36740EPSS 0.7%2023-09-12

    3D Viewer Remote Code Execution Vulnerability

55. 7.8CVE-2023-36739EPSS 0.7%2023-09-12

    3D Viewer Remote Code Execution Vulnerability

56. 4.4CVE-2023-36736EPSS 1.4%2023-09-12

    Microsoft Identity Linux Broker Remote Code Execution Vulnerability

57. 7.8CVE-2023-35355EPSS 0.6%2023-09-12

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

58. 8.8CVE-2023-33136EPSS 1.7%2023-09-12

    Azure DevOps Server Remote Code Execution Vulnerability

59. 9.8CVE-2023-29332EPSS 2.7%2023-09-12

    Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

60. 8.8CVE-2023-4863KEVEPSS >99.9%2023-09-12

    Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)