Microsoft Patch Tuesday, November 2023: the CVEs

Microsoft Patch Tuesday November 2023: the CVEs Microsoft published on 14 November 2023, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Oct 2023, Sep 2023, Aug 2023, Jul 2023, Jun 2023, May 2023, Apr 2023, Mar 2023, Feb 2023, Jan 2023, Dec 2022, Nov 2022. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 9.8CVE-2023-36049EPSS 6.8%2023-11-14

   .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

2. 9.8CVE-2023-36397EPSS 18%2023-11-14

   Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

3. 9.8CVE-2023-36028EPSS 2.8%2023-11-14

   Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

4. 9.8CVE-2023-36018EPSS 1.5%2023-11-14

   Visual Studio Code Jupyter Extension Spoofing Vulnerability