cve.bz

Microsoft Patch Tuesday, December 2023: the CVEs

Filter

Microsoft Patch Tuesday December 2023: the CVEs Microsoft published on 12 December 2023, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Nov 2023, Oct 2023, Sep 2023, Aug 2023, Jul 2023, Jun 2023, May 2023, Apr 2023, Mar 2023, Feb 2023, Jan 2023, Dec 2022. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

  1. 7.8CVE-2023-36696EPSS 0.9%

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

  2. 7.8CVE-2023-36391EPSS 7.2%

    Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

  3. 5.4CVE-2023-36020EPSS 1.0%

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  4. 7.4CVE-2023-36019EPSS 16%

    Microsoft Power Platform Connector Spoofing Vulnerability

  5. 5.3CVE-2023-36012EPSS 2.0%

    DHCP Server Service Information Disclosure Vulnerability

  6. 7.8CVE-2023-36011EPSS 0.7%

    Win32k Elevation of Privilege Vulnerability

  7. 7.5CVE-2023-36010EPSS 2.7%

    Microsoft Defender Denial of Service Vulnerability

  8. 5.5CVE-2023-36009EPSS 1.2%

    Microsoft Word Information Disclosure Vulnerability

  9. 8.8CVE-2023-36006EPSS 1.9%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  10. 8.1CVE-2023-36005EPSS 24%

    Windows Telephony Server Elevation of Privilege Vulnerability

  11. 7.5CVE-2023-36004EPSS 1.4%

    Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

  12. 7.3CVE-2023-36003EPSS 2.8%

    XAML Diagnostics Elevation of Privilege Vulnerability

  13. 7.8CVE-2023-35644EPSS 6.2%

    Windows Sysmain Service Elevation of Privilege Vulnerability

  14. 7.5CVE-2023-35643EPSS 2.6%

    DHCP Server Service Information Disclosure Vulnerability

  15. 6.5CVE-2023-35642EPSS 1.3%

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

  16. 8.8CVE-2023-35641EPSS 7.2%

    Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

  17. 8.8CVE-2023-35639EPSS 2.4%

    Microsoft ODBC Driver Remote Code Execution Vulnerability

  18. 7.5CVE-2023-35638EPSS 3.3%

    DHCP Server Service Denial of Service Vulnerability

  19. 6.5CVE-2023-35636EPSS 18%

    Microsoft Outlook Information Disclosure Vulnerability

  20. 5.5CVE-2023-35635EPSS 1.0%

    Windows Kernel Denial of Service Vulnerability

  21. 8.8CVE-2023-35634EPSS 1.0%

    Windows Bluetooth Driver Remote Code Execution Vulnerability

  22. 7.8CVE-2023-35633EPSS 8.7%

    Windows Kernel Elevation of Privilege Vulnerability

  23. 7.8CVE-2023-35632EPSS 6.5%

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  24. 7.8CVE-2023-35631EPSS 6.5%

    Win32k Elevation of Privilege Vulnerability

  25. 8.8CVE-2023-35630EPSS 6.1%

    Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

  26. 6.8CVE-2023-35629EPSS 0.9%

    Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

  27. 8.1CVE-2023-35628EPSS 93%

    Windows MSHTML Platform Remote Code Execution Vulnerability

  28. 4.7CVE-2023-35625EPSS 0.7%

    Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability

  29. 7.3CVE-2023-35624EPSS 0.9%

    Azure Connected Machine Agent Elevation of Privilege Vulnerability

  30. 7.5CVE-2023-35622EPSS 1.6%

    Windows DNS Spoofing Vulnerability

  31. 7.5CVE-2023-35621EPSS 2.3%

    Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability

  32. 5.3CVE-2023-35619EPSS 1.2%

    Microsoft Outlook for Mac Spoofing Vulnerability

  33. 7.8CVE-2023-21740EPSS 1.1%

    Windows Media Remote Code Execution Vulnerability