Microsoft Patch Tuesday, October 2023: the CVEs

Microsoft Patch Tuesday October 2023: the CVEs Microsoft published on 10 October 2023, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Sep 2023, Aug 2023, Jul 2023, Jun 2023, May 2023, Apr 2023, Mar 2023, Feb 2023, Jan 2023, Dec 2022, Nov 2022, Oct 2022. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 9.8CVE-2023-36434EPSS 2.3%2023-10-10

   Windows IIS Server Elevation of Privilege Vulnerability

2. 9.8CVE-2023-36419EPSS 1.8%2023-10-10

   Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability

3. 9.8CVE-2023-35349EPSS 2.9%2023-10-10

   Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability