cve.bz

Microsoft Patch Tuesday, November 2023: the CVEs

Filter

Microsoft Patch Tuesday November 2023: the CVEs Microsoft published on 14 November 2023, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Oct 2023, Sep 2023, Aug 2023, Jul 2023, Jun 2023, May 2023, Apr 2023, Mar 2023, Feb 2023, Jan 2023, Dec 2022, Nov 2022. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 5.5CVE-2023-36558EPSS 1.1%

    ASP.NET Core Security Feature Bypass Vulnerability

  2. 7.5CVE-2023-36038EPSS 2.8%

    ASP.NET Core Denial of Service Vulnerability

  3. 8.8CVE-2023-36437EPSS 2.0%

    Azure DevOps Server Remote Code Execution Vulnerability

  4. 9.8CVE-2023-36049EPSS 6.8%

    .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

  5. 4.1CVE-2023-36007EPSS 1.1%

    Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability

  6. 6.8CVE-2023-38177EPSS 3.4%

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  7. 8.8CVE-2023-38151EPSS 1.8%

    Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability

  8. 7.8CVE-2023-36719EPSS 0.6%

    Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

  9. 7.8CVE-2023-36705EPSS 0.7%

    Windows Installer Elevation of Privilege Vulnerability

  10. 8.8CVE-2023-36560EPSS 2.9%

    ASP.NET Security Feature Bypass Vulnerability

  11. 8.0CVE-2023-36439EPSS 5.0%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  12. 5.5CVE-2023-36428EPSS 0.8%

    Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

  13. 7.0CVE-2023-36427EPSS 1.5%

    Windows Hyper-V Elevation of Privilege Vulnerability

  14. 8.0CVE-2023-36425EPSS 1.5%

    Windows Distributed File System (DFS) Remote Code Execution Vulnerability

  15. 7.8CVE-2023-36424KEVEPSS 12%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  16. 8.8CVE-2023-36423EPSS 2.0%

    Microsoft Remote Registry Service Remote Code Execution Vulnerability

  17. 7.8CVE-2023-36422EPSS 0.8%

    Microsoft Windows Defender Elevation of Privilege Vulnerability

  18. 6.5CVE-2023-36413EPSS 30%

    Microsoft Office Security Feature Bypass Vulnerability

  19. 5.4CVE-2023-36410EPSS 0.9%

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  20. 7.8CVE-2023-36408EPSS 0.6%

    Windows Hyper-V Elevation of Privilege Vulnerability

  21. 7.8CVE-2023-36407EPSS 1.7%

    Windows Hyper-V Elevation of Privilege Vulnerability

  22. 5.5CVE-2023-36406EPSS 0.8%

    Windows Hyper-V Information Disclosure Vulnerability

  23. 7.0CVE-2023-36405EPSS 0.4%

    Windows Kernel Elevation of Privilege Vulnerability

  24. 5.5CVE-2023-36404EPSS 0.8%

    Windows Kernel Information Disclosure Vulnerability

  25. 7.0CVE-2023-36403EPSS 0.5%

    Windows Kernel Elevation of Privilege Vulnerability

  26. 8.8CVE-2023-36402EPSS 1.8%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  27. 7.2CVE-2023-36401EPSS 1.9%

    Microsoft Remote Registry Service Remote Code Execution Vulnerability

  28. 8.8CVE-2023-36400EPSS 4.3%

    Windows HMAC Key Derivation Elevation of Privilege Vulnerability

  29. 7.1CVE-2023-36399EPSS 8.3%

    Windows Storage Elevation of Privilege Vulnerability

  30. 6.5CVE-2023-36398EPSS 0.8%

    Windows NTFS Information Disclosure Vulnerability

  31. 9.8CVE-2023-36397EPSS 18%

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  32. 7.8CVE-2023-36396EPSS 1.7%

    Windows Compressed Folder Remote Code Execution Vulnerability

  33. 7.5CVE-2023-36395EPSS 2.5%

    Windows Deployment Services Denial of Service Vulnerability

  34. 7.0CVE-2023-36394EPSS 6.7%

    Windows Search Service Elevation of Privilege Vulnerability

  35. 7.8CVE-2023-36393EPSS 1.0%

    Windows User Interface Application Core Remote Code Execution Vulnerability

  36. 7.5CVE-2023-36392EPSS 2.5%

    DHCP Server Service Denial of Service Vulnerability

  37. 8.6CVE-2023-36052EPSS 21%

    Azure CLI REST Command Information Disclosure Vulnerability

  38. 8.0CVE-2023-36050EPSS 39%

    Microsoft Exchange Server Spoofing Vulnerability

  39. 7.8CVE-2023-36047EPSS 1.1%

    Windows Authentication Elevation of Privilege Vulnerability

  40. 7.1CVE-2023-36046EPSS 0.7%

    Windows Authentication Denial of Service Vulnerability

  41. 7.8CVE-2023-36045EPSS 1.0%

    Microsoft Office Graphics Remote Code Execution Vulnerability

  42. 6.5CVE-2023-36043EPSS 1.4%

    Open Management Infrastructure Information Disclosure Vulnerability

  43. 5.5CVE-2023-36042EPSS 0.8%

    Visual Studio Denial of Service Vulnerability

  44. 7.8CVE-2023-36041EPSS 57%

    Microsoft Excel Remote Code Execution Vulnerability

  45. 8.0CVE-2023-36039EPSS 73%

    Microsoft Exchange Server Spoofing Vulnerability

  46. 7.8CVE-2023-36037EPSS 1.2%

    Microsoft Excel Security Feature Bypass Vulnerability

  47. 7.8CVE-2023-36036KEVEPSS 17%

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

  48. 8.0CVE-2023-36035EPSS 87%

    Microsoft Exchange Server Spoofing Vulnerability

  49. 7.8CVE-2023-36033KEVEPSS 11%

    Windows DWM Core Library Elevation of Privilege Vulnerability

  50. 5.4CVE-2023-36031EPSS 0.9%

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  51. 6.1CVE-2023-36030EPSS 0.9%

    Microsoft Dynamics 365 Sales Spoofing Vulnerability

  52. 9.8CVE-2023-36028EPSS 2.8%

    Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

  53. 8.8CVE-2023-36025KEVEPSS 88%

    Windows SmartScreen Security Feature Bypass Vulnerability

  54. 8.0CVE-2023-36021EPSS 1.7%

    Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability

  55. 9.8CVE-2023-36018EPSS 1.5%

    Visual Studio Code Jupyter Extension Spoofing Vulnerability

  56. 8.8CVE-2023-36017EPSS 25%

    Windows Scripting Engine Memory Corruption Vulnerability

  57. 3.4CVE-2023-36016EPSS 1.3%

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability