Microsoft Patch Tuesday, September 2023: the CVEs

Microsoft Patch Tuesday September 2023: the CVEs Microsoft published on 12 September 2023, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Aug 2023, Jul 2023, Jun 2023, May 2023, Apr 2023, Mar 2023, Feb 2023, Jan 2023, Dec 2022, Nov 2022, Oct 2022, Sep 2022. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 7.8CVE-2023-36802KEVEPSS 28%2023-09-12

   Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

2. 6.5CVE-2023-36761KEVEPSS 20%2023-09-12

   Microsoft Word Information Disclosure Vulnerability

3. 8.8CVE-2023-4863KEVEPSS >99.9%2023-09-12

   Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)