cve.bz

Microsoft Patch Tuesday, October 2023: the CVEs

Filter

Microsoft Patch Tuesday October 2023: the CVEs Microsoft published on 10 October 2023, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Sep 2023, Aug 2023, Jul 2023, Jun 2023, May 2023, Apr 2023, Mar 2023, Feb 2023, Jan 2023, Dec 2022, Nov 2022, Oct 2022. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 8.1CVE-2023-41774EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  2. 8.1CVE-2023-41773EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  3. 7.8CVE-2023-41772EPSS 13%

    Win32k Elevation of Privilege Vulnerability

  4. 8.1CVE-2023-41771EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  5. 8.1CVE-2023-41770EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  6. 8.1CVE-2023-41769EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  7. 8.1CVE-2023-41768EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  8. 8.1CVE-2023-41767EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  9. 7.8CVE-2023-41766EPSS 0.8%

    Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

  10. 8.1CVE-2023-41765EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  11. 5.3CVE-2023-41763KEVExploitEPSS 90%

    Skype for Business Elevation of Privilege Vulnerability

  12. 7.5CVE-2023-38171EPSS 71%

    Microsoft QUIC Denial of Service Vulnerability

  13. 8.1CVE-2023-38166EPSS 1.3%

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

  14. 7.0CVE-2023-38159EPSS 4.1%

    Windows Graphics Component Elevation of Privilege Vulnerability

  15. 7.0CVE-2023-36902EPSS 0.5%

    Windows Runtime Remote Code Execution Vulnerability

  16. 7.8CVE-2023-36790EPSS 0.5%

    Windows RDP Encoder Mirror Driver Elevation of Privilege Vulnerability

  17. 7.2CVE-2023-36789EPSS 2.5%

    Skype for Business Remote Code Execution Vulnerability

  18. 7.2CVE-2023-36786EPSS 2.6%

    Skype for Business Remote Code Execution Vulnerability

  19. 7.8CVE-2023-36785EPSS 0.9%

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  20. 7.2CVE-2023-36780EPSS 2.7%

    Skype for Business Remote Code Execution Vulnerability

  21. 8.0CVE-2023-36778EPSS 1.7%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  22. 7.0CVE-2023-36776EPSS 2.1%

    Win32k Elevation of Privilege Vulnerability

  23. 7.8CVE-2023-36743EPSS 3.6%

    Win32k Elevation of Privilege Vulnerability

  24. 7.8CVE-2023-36737EPSS 0.5%

    Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

  25. 7.8CVE-2023-36732EPSS 0.6%

    Win32k Elevation of Privilege Vulnerability

  26. 7.8CVE-2023-36731EPSS 6.6%

    Win32k Elevation of Privilege Vulnerability

  27. 7.8CVE-2023-36730EPSS 0.9%

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  28. 7.8CVE-2023-36729EPSS 0.6%

    Named Pipe File System Elevation of Privilege Vulnerability

  29. 5.5CVE-2023-36728EPSS 0.7%

    Microsoft SQL Server Denial of Service Vulnerability

  30. 7.8CVE-2023-36726EPSS 0.6%

    Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability

  31. 7.8CVE-2023-36725EPSS 0.5%

    Windows Kernel Elevation of Privilege Vulnerability

  32. 5.5CVE-2023-36724EPSS 0.5%

    Windows Power Management Service Information Disclosure Vulnerability

  33. 7.8CVE-2023-36723EPSS 2.0%

    Windows Container Manager Service Elevation of Privilege Vulnerability

  34. 4.4CVE-2023-36722EPSS 1.4%

    Active Directory Domain Services Information Disclosure Vulnerability

  35. 7.0CVE-2023-36721EPSS 0.4%

    Windows Error Reporting Service Elevation of Privilege Vulnerability

  36. 7.5CVE-2023-36720EPSS 2.5%

    Windows Mixed Reality Developer Tools Denial of Service Vulnerability

  37. 7.8CVE-2023-36718EPSS 1.3%

    Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability

  38. 6.5CVE-2023-36717EPSS 0.7%

    Windows Virtual Trusted Platform Module Denial of Service Vulnerability

  39. 5.5CVE-2023-36713EPSS 6.8%

    Windows Common Log File System Driver Information Disclosure Vulnerability

  40. 7.8CVE-2023-36712EPSS 0.8%

    Windows Kernel Elevation of Privilege Vulnerability

  41. 7.8CVE-2023-36711EPSS 0.6%

    Windows Runtime C++ Template Library Elevation of Privilege Vulnerability

  42. 7.8CVE-2023-36710EPSS 0.9%

    Windows Media Foundation Core Remote Code Execution Vulnerability

  43. 7.5CVE-2023-36709EPSS 2.7%

    Microsoft AllJoyn API Denial of Service Vulnerability

  44. 7.5CVE-2023-36707EPSS 2.7%

    Windows Deployment Services Denial of Service Vulnerability

  45. 6.5CVE-2023-36706EPSS 2.0%

    Windows Deployment Services Information Disclosure Vulnerability

  46. 7.8CVE-2023-36704EPSS 0.8%

    Windows Setup Files Cleanup Remote Code Execution Vulnerability

  47. 7.5CVE-2023-36703EPSS 2.5%

    DHCP Server Service Denial of Service Vulnerability

  48. 7.8CVE-2023-36702EPSS 0.8%

    Microsoft DirectMusic Remote Code Execution Vulnerability

  49. 7.8CVE-2023-36701EPSS 0.6%

    Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability

  50. 4.4CVE-2023-36698EPSS 0.5%

    Windows Kernel Security Feature Bypass Vulnerability

  51. 8.0CVE-2023-36697EPSS 2.2%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  52. 7.5CVE-2023-36606EPSS 69%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  53. 7.8CVE-2023-36605EPSS 0.5%

    Windows Named Pipe Filesystem Elevation of Privilege Vulnerability

  54. 7.5CVE-2023-36603EPSS 2.5%

    Windows TCP/IP Denial of Service Vulnerability

  55. 7.5CVE-2023-36602EPSS 2.5%

    Windows TCP/IP Denial of Service Vulnerability

  56. 7.8CVE-2023-36598EPSS 0.8%

    Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability

  57. 7.5CVE-2023-36596EPSS 2.1%

    Remote Procedure Call Information Disclosure Vulnerability

  58. 7.8CVE-2023-36594EPSS 8.0%

    Windows Graphics Component Elevation of Privilege Vulnerability

  59. 7.3CVE-2023-36593EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  60. 7.3CVE-2023-36592EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  61. 7.3CVE-2023-36591EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  62. 7.3CVE-2023-36590EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  63. 7.3CVE-2023-36589EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  64. 7.5CVE-2023-36585EPSS 2.6%

    Windows upnphost.dll Denial of Service Vulnerability

  65. 5.4CVE-2023-36584KEVEPSS 3.3%

    Windows Mark of the Web Security Feature Bypass Vulnerability

  66. 7.3CVE-2023-36583EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  67. 7.3CVE-2023-36582EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  68. 7.5CVE-2023-36581EPSS 2.5%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  69. 7.5CVE-2023-36579EPSS 2.5%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  70. 7.3CVE-2023-36578EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  71. 8.8CVE-2023-36577EPSS 1.8%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  72. 5.5CVE-2023-36576EPSS 0.9%

    Windows Kernel Information Disclosure Vulnerability

  73. 7.3CVE-2023-36575EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  74. 7.3CVE-2023-36574EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  75. 7.3CVE-2023-36573EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  76. 7.3CVE-2023-36572EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  77. 7.3CVE-2023-36571EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  78. 7.3CVE-2023-36570EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  79. 8.4CVE-2023-36569EPSS 0.5%

    Microsoft Office Elevation of Privilege Vulnerability

  80. 7.0CVE-2023-36568EPSS 0.4%

    Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

  81. 7.5CVE-2023-36567EPSS 2.1%

    Windows Deployment Services Information Disclosure Vulnerability

  82. 6.5CVE-2023-36566EPSS 3.0%

    Microsoft Common Data Model SDK Denial of Service Vulnerability

  83. 7.0CVE-2023-36565EPSS 0.4%

    Microsoft Office Graphics Elevation of Privilege Vulnerability

  84. 6.5CVE-2023-36564EPSS 1.4%

    Windows Search Security Feature Bypass Vulnerability

  85. 5.5CVE-2023-36563KEVEPSS 20%

    Microsoft WordPad Information Disclosure Vulnerability

  86. 7.3CVE-2023-36561EPSS 0.9%

    Azure DevOps Server Elevation of Privilege Vulnerability

  87. 7.8CVE-2023-36557EPSS 0.8%

    PrintHTML API Remote Code Execution Vulnerability

  88. 7.5CVE-2023-36438EPSS 2.0%

    Windows TCP/IP Information Disclosure Vulnerability

  89. 7.8CVE-2023-36436EPSS 0.8%

    Windows MSHTML Platform Remote Code Execution Vulnerability

  90. 7.5CVE-2023-36435EPSS 5.7%

    Microsoft QUIC Denial of Service Vulnerability

  91. 9.8CVE-2023-36434EPSS 2.3%

    Windows IIS Server Elevation of Privilege Vulnerability

  92. 6.5CVE-2023-36433EPSS 2.2%

    Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

  93. 7.5CVE-2023-36431EPSS 2.5%

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  94. 6.5CVE-2023-36429EPSS 2.2%

    Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

  95. 7.8CVE-2023-36420EPSS 0.8%

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

  96. 9.8CVE-2023-36419EPSS 1.8%

    Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability

  97. 7.8CVE-2023-36418EPSS 0.7%

    Azure RTOS GUIX Studio Remote Code Execution Vulnerability

  98. 7.8CVE-2023-36417EPSS 0.8%

    Microsoft SQL OLE DB Remote Code Execution Vulnerability

  99. 6.1CVE-2023-36416EPSS 0.9%

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  100. 8.8CVE-2023-36415EPSS 1.8%

    Azure Identity SDK Remote Code Execution Vulnerability