MSRC update 2026-11-13T08:40:40Z

This commit is contained in:
Vulnerability Bot committed 2026-11-13 09:40:40 +01:00
1 parent 39c686cdc7
commit 6014f0fded
34 files changed
+34 -34

No files matched your search

+1 -1
View File
@@ -1 +1 @@
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"updates-this-month\">Updates this Month</h2>\n<p>This release consists of security updates for the following products, features and roles.</p>\n<ul>\n<li>.NET Core</li>\n<li>Azure Machine Learning</li>\n<li>Azure Service Connector</li>\n<li>Microsoft Bluetooth Driver</li>\n<li>Microsoft Defender for Endpoint</li>\n<li>Microsoft Dynamics</li>\n<li>Microsoft Dynamics 365 Customer Voice</li>\n<li>Microsoft Edge (Chromium-based)</li>\n<li>Microsoft Graphics Component</li>\n<li>Microsoft Message Queuing</li>\n<li>Microsoft Office</li>\n<li>Microsoft Office Publisher</li>\n<li>Microsoft Office SharePoint</li>\n<li>Microsoft Office Word</li>\n<li>Microsoft PostScript Printer Driver</li>\n<li>Microsoft Printer Drivers</li>\n<li>Microsoft WDAC OLE DB provider for SQL</li>\n<li>Microsoft Windows DNS</li>\n<li>Visual Studio</li>\n<li>Visual Studio Code</li>\n<li>Windows Active Directory</li>\n<li>Windows ALPC</li>\n<li>Windows Ancillary Function Driver for WinSock</li>\n<li>Windows Boot Manager</li>\n<li>Windows Clip Service</li>\n<li>Windows CNG Key Isolation Service</li>\n<li>Windows Common Log File System Driver</li>\n<li>Windows DHCP Server</li>\n<li>Windows Enroll Engine</li>\n<li>Windows Error Reporting</li>\n<li>Windows Group Policy</li>\n<li>Windows Internet Key Exchange (IKE) Protocol</li>\n<li>Windows Kerberos</li>\n<li>Windows Kernel</li>\n<li>Windows Layer 2 Tunneling Protocol</li>\n<li>Windows Lock Screen</li>\n<li>Windows Netlogon</li>\n<li>Windows Network Address Translation (NAT)</li>\n<li>Windows Network File System</li>\n<li>Windows Network Load Balancing</li>\n<li>Windows NTLM</li>\n<li>Windows PGM</li>\n<li>Windows Point-to-Point Protocol over Ethernet (PPPoE)</li>\n<li>Windows Point-to-Point Tunneling Protocol</li>\n<li>Windows Raw Image Extension</li>\n<li>Windows RDP Client</li>\n<li>Windows Registry</li>\n<li>Windows RPC API</li>\n<li>Windows Secure Boot</li>\n<li>Windows Secure Channel</li>\n<li>Windows Secure Socket Tunneling Protocol (SSTP)</li>\n<li>Windows Transport Security Layer (TLS)</li>\n<li>Windows Win32K</li>\n</ul>\n<p>Please note the following information regarding the security updates:</p>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>January 11, 2022</td>\n<td><a href=\"https://aka.ms/SUGNotificationProfile\">Coming Soon: New Security Update Guide Notification System</a></td>\n</tr>\n<tr>\n<td>February 9, 2021</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2021/02/09/continuing-to-listen-good-news-about-the-security-update-guide-api/\">Continuing to Listen: Good News about the Security Update Guide API</a></td>\n</tr>\n<tr>\n<td>January 13, 2021</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/\">Security Update Guide Supports CVEs Assigned by Industry Partners</a></td>\n</tr>\n<tr>\n<td>December 8, 2020</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2020/12/08/security-update-guide-lets-keep-the-conversation-going/\">Security Update Guide: Let’s keep the conversation going</a></td>\n</tr>\n<tr>\n<td>November 9, 2020</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2020/11/09/vulnerability-descriptions-in-the-new-version-of-the-security-update-guide/\">Vulnerability Descriptions in the New Version of the Security Update Guide</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-information\">Relevant Information</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A list of the latest servicing stack updates for each operating system can be found in <a href=\"https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001\">ADV990001</a>. This list will be updated whenever a new servicing stack update is released. It is important to install the latesLine truncated
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"updates-this-month\">Updates this Month</h2>\n<p>This release consists of security updates for the following products, features and roles.</p>\n<ul>\n<li>.NET Core</li>\n<li>Azure Machine Learning</li>\n<li>Azure Service Connector</li>\n<li>Microsoft Bluetooth Driver</li>\n<li>Microsoft Defender for Endpoint</li>\n<li>Microsoft Dynamics</li>\n<li>Microsoft Dynamics 365 Customer Voice</li>\n<li>Microsoft Edge (Chromium-based)</li>\n<li>Microsoft Graphics Component</li>\n<li>Microsoft Message Queuing</li>\n<li>Microsoft Office</li>\n<li>Microsoft Office Publisher</li>\n<li>Microsoft Office SharePoint</li>\n<li>Microsoft Office Word</li>\n<li>Microsoft PostScript Printer Driver</li>\n<li>Microsoft Printer Drivers</li>\n<li>Microsoft WDAC OLE DB provider for SQL</li>\n<li>Microsoft Windows DNS</li>\n<li>Visual Studio</li>\n<li>Visual Studio Code</li>\n<li>Windows Active Directory</li>\n<li>Windows ALPC</li>\n<li>Windows Ancillary Function Driver for WinSock</li>\n<li>Windows Boot Manager</li>\n<li>Windows Clip Service</li>\n<li>Windows CNG Key Isolation Service</li>\n<li>Windows Common Log File System Driver</li>\n<li>Windows DHCP Server</li>\n<li>Windows Enroll Engine</li>\n<li>Windows Error Reporting</li>\n<li>Windows Group Policy</li>\n<li>Windows Internet Key Exchange (IKE) Protocol</li>\n<li>Windows Kerberos</li>\n<li>Windows Kernel</li>\n<li>Windows Layer 2 Tunneling Protocol</li>\n<li>Windows Lock Screen</li>\n<li>Windows Netlogon</li>\n<li>Windows Network Address Translation (NAT)</li>\n<li>Windows Network File System</li>\n<li>Windows Network Load Balancing</li>\n<li>Windows NTLM</li>\n<li>Windows PGM</li>\n<li>Windows Point-to-Point Protocol over Ethernet (PPPoE)</li>\n<li>Windows Point-to-Point Tunneling Protocol</li>\n<li>Windows Raw Image Extension</li>\n<li>Windows RDP Client</li>\n<li>Windows Registry</li>\n<li>Windows RPC API</li>\n<li>Windows Secure Boot</li>\n<li>Windows Secure Channel</li>\n<li>Windows Secure Socket Tunneling Protocol (SSTP)</li>\n<li>Windows Transport Security Layer (TLS)</li>\n<li>Windows Win32K</li>\n</ul>\n<p>Please note the following information regarding the security updates:</p>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>January 11, 2022</td>\n<td><a href=\"https://aka.ms/SUGNotificationProfile\">Coming Soon: New Security Update Guide Notification System</a></td>\n</tr>\n<tr>\n<td>February 9, 2021</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2021/02/09/continuing-to-listen-good-news-about-the-security-update-guide-api/\">Continuing to Listen: Good News about the Security Update Guide API</a></td>\n</tr>\n<tr>\n<td>January 13, 2021</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/\">Security Update Guide Supports CVEs Assigned by Industry Partners</a></td>\n</tr>\n<tr>\n<td>December 8, 2020</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2020/12/08/security-update-guide-lets-keep-the-conversation-going/\">Security Update Guide: Let’s keep the conversation going</a></td>\n</tr>\n<tr>\n<td>November 9, 2020</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2020/11/09/vulnerability-descriptions-in-the-new-version-of-the-security-update-guide/\">Vulnerability Descriptions in the New Version of the Security Update Guide</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-information\">Relevant Information</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A list of the latest servicing stack updates for each operating system can be found in <a href=\"https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001\">ADV990001</a>. This list will be updated whenever a new servicing stack update is released. It is important to install the latesLine truncated
+1 -1
View File
@@ -1 +1 @@
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-74-microsoft-cves-and-2-advisories\">This release consists of the following 74 Microsoft CVEs, and 2 advisories:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Microsoft Office</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV230003\">ADV230003</a></td>\n<td></td>\n<td></td>\n<td>Exploitation Detected</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Memory Integrity System Readiness Scan Tool</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV230004\">ADV230004</a></td>\n<td></td>\n<td></td>\n<td>Exploitation Detected</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21709\">CVE-2023-21709</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Teams</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29328\">CVE-2023-29328</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Teams</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29330\">CVE-2023-29330</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Kernel</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35359\">CVE-2023-35359</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35368\">CVE-2023-35368</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Excel</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35371\">CVE-2023-35371</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Visio</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35372\">CVE-2023-35372</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35376\">CVE-2023-35376</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35377\">CVE-2023-35377</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Projected File System</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35378\">CVE-2023-35378</a></td>\n<td>7.0</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Windows Reliability Analysis Metrics Calculation Engine</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35379\">CVE-2023-35379</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Kernel</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35380\">CVE-2023-35380</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/ALine truncated
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-74-microsoft-cves-and-2-advisories\">This release consists of the following 74 Microsoft CVEs, and 2 advisories:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Microsoft Office</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV230003\">ADV230003</a></td>\n<td></td>\n<td></td>\n<td>Exploitation Detected</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Memory Integrity System Readiness Scan Tool</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV230004\">ADV230004</a></td>\n<td></td>\n<td></td>\n<td>Exploitation Detected</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21709\">CVE-2023-21709</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Teams</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29328\">CVE-2023-29328</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Teams</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29330\">CVE-2023-29330</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Kernel</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35359\">CVE-2023-35359</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35368\">CVE-2023-35368</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Excel</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35371\">CVE-2023-35371</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Visio</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35372\">CVE-2023-35372</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35376\">CVE-2023-35376</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35377\">CVE-2023-35377</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Projected File System</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35378\">CVE-2023-35378</a></td>\n<td>7.0</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Windows Reliability Analysis Metrics Calculation Engine</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35379\">CVE-2023-35379</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Kernel</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35380\">CVE-2023-35380</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/ALine truncated
+1 -1
View File
@@ -1 +1 @@
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-37-microsoft-cves\">This release consists of the following 37 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows Media</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21740\">CVE-2023-21740</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure DevOps</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21751\">CVE-2023-21751</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35618\">CVE-2023-35618</a></td>\n<td>9.6</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Outlook</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35619\">CVE-2023-35619</a></td>\n<td>5.3</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35621\">CVE-2023-35621</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Windows DNS</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35622\">CVE-2023-35622</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Connected Machine Agent</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35624\">CVE-2023-35624</a></td>\n<td>7.3</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Machine Learning</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35625\">CVE-2023-35625</a></td>\n<td>4.7</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows MSHTML Platform</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35628\">CVE-2023-35628</a></td>\n<td>8.1</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows USB Mass Storage Class Driver</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35629\">CVE-2023-35629</a></td>\n<td>6.8</td>\n<td>CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Internet Connection Sharing (ICS)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35630\">CVE-2023-35630</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Win32K</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35631\">CVE-2023-35631</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Internet Connection Sharing (ICS)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35632\">CVE-2023-35632</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Kernel</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advLine truncated
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-37-microsoft-cves\">This release consists of the following 37 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows Media</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21740\">CVE-2023-21740</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure DevOps</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21751\">CVE-2023-21751</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35618\">CVE-2023-35618</a></td>\n<td>9.6</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Outlook</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35619\">CVE-2023-35619</a></td>\n<td>5.3</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35621\">CVE-2023-35621</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Windows DNS</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35622\">CVE-2023-35622</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Connected Machine Agent</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35624\">CVE-2023-35624</a></td>\n<td>7.3</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Machine Learning</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35625\">CVE-2023-35625</a></td>\n<td>4.7</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows MSHTML Platform</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35628\">CVE-2023-35628</a></td>\n<td>8.1</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows USB Mass Storage Class Driver</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35629\">CVE-2023-35629</a></td>\n<td>6.8</td>\n<td>CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Internet Connection Sharing (ICS)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35630\">CVE-2023-35630</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Win32K</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35631\">CVE-2023-35631</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Internet Connection Sharing (ICS)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35632\">CVE-2023-35632</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Kernel</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advLine truncated
+1 -1
View File
@@ -1 +1 @@
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"updates-this-month\">Updates this Month</h2>\n<p>This release consists of security updates for the following products, features and roles.</p>\n<ul>\n<li>.NET and Visual Studio</li>\n<li>.NET Framework</li>\n<li>3D Builder</li>\n<li>Azure App Service</li>\n<li>Azure Data Box Gateway</li>\n<li>Azure DevOps</li>\n<li>Azure Machine Learning</li>\n<li>HoloLens</li>\n<li>Internet Storage Name Service</li>\n<li>Microsoft Defender for Endpoint</li>\n<li>Microsoft Defender for IoT</li>\n<li>Microsoft Dynamics</li>\n<li>Microsoft Edge (Chromium-based)</li>\n<li>Microsoft Exchange Server</li>\n<li>Microsoft Graphics Component</li>\n<li>Microsoft Office</li>\n<li>Microsoft Office OneNote</li>\n<li>Microsoft Office Publisher</li>\n<li>Microsoft Office SharePoint</li>\n<li>Microsoft Office Word</li>\n<li>Microsoft PostScript Printer Driver</li>\n<li>Microsoft WDAC OLE DB provider for SQL</li>\n<li>Microsoft Windows Codecs Library</li>\n<li>Power BI</li>\n<li>SQL Server</li>\n<li>Visual Studio</li>\n<li>Windows Active Directory</li>\n<li>Windows ALPC</li>\n<li>Windows Common Log File System Driver</li>\n<li>Windows Cryptographic Services</li>\n<li>Windows Distributed File System (DFS)</li>\n<li>Windows Fax and Scan Service</li>\n<li>Windows HTTP.sys</li>\n<li>Windows Installer</li>\n<li>Windows iSCSI</li>\n<li>Windows Kerberos</li>\n<li>Windows MSHTML Platform</li>\n<li>Windows ODBC Driver</li>\n<li>Windows Protected EAP (PEAP)</li>\n<li>Windows SChannel</li>\n<li>Windows Win32K</li>\n</ul>\n<p>Please note the following information regarding the security updates:</p>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>January 6, 2023</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2023/01/06/publishing-cbl-mariner-cves-on-the-security-update-guide-cvrf-api/\">Publishing CBL-Mariner CVEs on the Security Update Guide CVRF API</a></td>\n</tr>\n<tr>\n<td>December 29, 2022</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2022/12/29/security-update-guide-improvement-representing-hotpatch-updates/\">Security Update Guide Improvement – Representing Hotpatch Updates</a></td>\n</tr>\n<tr>\n<td>August 9, 2022</td>\n<td><a href=\"https://aka.ms/SUGNotificationProfile2\">Security Update Guide Notification System News: Create your profile now</a></td>\n</tr>\n<tr>\n<td>January 11, 2022</td>\n<td><a href=\"https://aka.ms/SUGNotificationProfile\">Coming Soon: New Security Update Guide Notification System</a></td>\n</tr>\n<tr>\n<td>February 9, 2021</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2021/02/09/continuing-to-listen-good-news-about-the-security-update-guide-api/\">Continuing to Listen: Good News about the Security Update Guide API</a></td>\n</tr>\n<tr>\n<td>January 13, 2021</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/\">Security Update Guide Supports CVEs Assigned by Industry Partners</a></td>\n</tr>\n<tr>\n<td>December 8, 2020</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2020/12/08/security-update-guide-lets-keep-the-conversation-going/\">Security Update Guide: Let’s keep the conversation going</a></td>\n</tr>\n<tr>\n<td>November 9, 2020</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2020/11/09/vulnerability-descriptions-in-the-new-version-of-the-security-update-guide/\">Vulnerability Descriptions in the New Version of the Security Update Guide</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-information\">Relevant Information</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A list of the latest servicing stack updates for each operating system can be found in <a href=\"https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001\">ADV990001</a>. This list will be updated wheLine truncated
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"updates-this-month\">Updates this Month</h2>\n<p>This release consists of security updates for the following products, features and roles.</p>\n<ul>\n<li>.NET and Visual Studio</li>\n<li>.NET Framework</li>\n<li>3D Builder</li>\n<li>Azure App Service</li>\n<li>Azure Data Box Gateway</li>\n<li>Azure DevOps</li>\n<li>Azure Machine Learning</li>\n<li>HoloLens</li>\n<li>Internet Storage Name Service</li>\n<li>Microsoft Defender for Endpoint</li>\n<li>Microsoft Defender for IoT</li>\n<li>Microsoft Dynamics</li>\n<li>Microsoft Edge (Chromium-based)</li>\n<li>Microsoft Exchange Server</li>\n<li>Microsoft Graphics Component</li>\n<li>Microsoft Office</li>\n<li>Microsoft Office OneNote</li>\n<li>Microsoft Office Publisher</li>\n<li>Microsoft Office SharePoint</li>\n<li>Microsoft Office Word</li>\n<li>Microsoft PostScript Printer Driver</li>\n<li>Microsoft WDAC OLE DB provider for SQL</li>\n<li>Microsoft Windows Codecs Library</li>\n<li>Power BI</li>\n<li>SQL Server</li>\n<li>Visual Studio</li>\n<li>Windows Active Directory</li>\n<li>Windows ALPC</li>\n<li>Windows Common Log File System Driver</li>\n<li>Windows Cryptographic Services</li>\n<li>Windows Distributed File System (DFS)</li>\n<li>Windows Fax and Scan Service</li>\n<li>Windows HTTP.sys</li>\n<li>Windows Installer</li>\n<li>Windows iSCSI</li>\n<li>Windows Kerberos</li>\n<li>Windows MSHTML Platform</li>\n<li>Windows ODBC Driver</li>\n<li>Windows Protected EAP (PEAP)</li>\n<li>Windows SChannel</li>\n<li>Windows Win32K</li>\n</ul>\n<p>Please note the following information regarding the security updates:</p>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>January 6, 2023</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2023/01/06/publishing-cbl-mariner-cves-on-the-security-update-guide-cvrf-api/\">Publishing CBL-Mariner CVEs on the Security Update Guide CVRF API</a></td>\n</tr>\n<tr>\n<td>December 29, 2022</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2022/12/29/security-update-guide-improvement-representing-hotpatch-updates/\">Security Update Guide Improvement – Representing Hotpatch Updates</a></td>\n</tr>\n<tr>\n<td>August 9, 2022</td>\n<td><a href=\"https://aka.ms/SUGNotificationProfile2\">Security Update Guide Notification System News: Create your profile now</a></td>\n</tr>\n<tr>\n<td>January 11, 2022</td>\n<td><a href=\"https://aka.ms/SUGNotificationProfile\">Coming Soon: New Security Update Guide Notification System</a></td>\n</tr>\n<tr>\n<td>February 9, 2021</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2021/02/09/continuing-to-listen-good-news-about-the-security-update-guide-api/\">Continuing to Listen: Good News about the Security Update Guide API</a></td>\n</tr>\n<tr>\n<td>January 13, 2021</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/\">Security Update Guide Supports CVEs Assigned by Industry Partners</a></td>\n</tr>\n<tr>\n<td>December 8, 2020</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2020/12/08/security-update-guide-lets-keep-the-conversation-going/\">Security Update Guide: Let’s keep the conversation going</a></td>\n</tr>\n<tr>\n<td>November 9, 2020</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2020/11/09/vulnerability-descriptions-in-the-new-version-of-the-security-update-guide/\">Vulnerability Descriptions in the New Version of the Security Update Guide</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-information\">Relevant Information</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A list of the latest servicing stack updates for each operating system can be found in <a href=\"https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001\">ADV990001</a>. This list will be updated wheLine truncated
+1 -1
View File
@@ -1 +1 @@
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"updates-this-month\">Updates this Month</h2>\n<p>This release consists of the following 136 CVEs and 2 Advisories:</p>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows Certificates</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV230001\">ADV230001</a></td>\n<td></td>\n<td></td>\n<td>Exploitation Detected</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows EFI Partition</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV230002\">ADV230002</a></td>\n<td></td>\n<td></td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Netlogon</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21526\">CVE-2023-21526</a></td>\n<td>7.4</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Graphics Component</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21756\">CVE-2023-21756</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Admin Center</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29347\">CVE-2023-29347</a></td>\n<td>8.7</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Cluster Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32033\">CVE-2023-32033</a></td>\n<td>6.6</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Remote Procedure Call</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32034\">CVE-2023-32034</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Remote Procedure Call</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32035\">CVE-2023-32035</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Layer 2 Tunneling Protocol</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32037\">CVE-2023-32037</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows ODBC Driver</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32038\">CVE-2023-32038</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Microsoft Printer Drivers</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32039\">CVE-2023-32039</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Printer Drivers</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32040\">CVE-2023-32040</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Update Orchestrator Service</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32041\">CVE-2023-32041</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows OLE</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32042\">CVE-2023-32042</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less LLine truncated
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"updates-this-month\">Updates this Month</h2>\n<p>This release consists of the following 136 CVEs and 2 Advisories:</p>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows Certificates</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV230001\">ADV230001</a></td>\n<td></td>\n<td></td>\n<td>Exploitation Detected</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows EFI Partition</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV230002\">ADV230002</a></td>\n<td></td>\n<td></td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Netlogon</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21526\">CVE-2023-21526</a></td>\n<td>7.4</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Graphics Component</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21756\">CVE-2023-21756</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Admin Center</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29347\">CVE-2023-29347</a></td>\n<td>8.7</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Cluster Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32033\">CVE-2023-32033</a></td>\n<td>6.6</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Remote Procedure Call</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32034\">CVE-2023-32034</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Remote Procedure Call</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32035\">CVE-2023-32035</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Layer 2 Tunneling Protocol</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32037\">CVE-2023-32037</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows ODBC Driver</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32038\">CVE-2023-32038</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Microsoft Printer Drivers</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32039\">CVE-2023-32039</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Printer Drivers</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32040\">CVE-2023-32040</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Update Orchestrator Service</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32041\">CVE-2023-32041</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows OLE</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-32042\">CVE-2023-32042</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less LLine truncated
+1 -1
View File
@@ -1 +1 @@
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-79-microsoft-cves\">This release consists of the following 79 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Azure DevOps</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21565\">CVE-2023-21565</a></td>\n<td>7.1</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure DevOps</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21569\">CVE-2023-21569</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET and Visual Studio</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24895\">CVE-2023-24895</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24896\">CVE-2023-24896</a></td>\n<td>5.4</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET and Visual Studio</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24897\">CVE-2023-24897</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET and Visual Studio</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24936\">CVE-2023-24936</a></td>\n<td>8.1</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows CryptoAPI</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24937\">CVE-2023-24937</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows CryptoAPI</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24938\">CVE-2023-24938</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-28310\">CVE-2023-28310</a></td>\n<td>8.0</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET Framework</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29326\">CVE-2023-29326</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET Core</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29331\">CVE-2023-29331</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>NuGet Client</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29337\">CVE-2023-29337</a></td>\n<td>7.1</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29345\">CVE-2023-29345</a></td>\n<td>6.1</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows NTFS</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29346\">CVE-2023-29346</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/Line truncated
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-79-microsoft-cves\">This release consists of the following 79 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Azure DevOps</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21565\">CVE-2023-21565</a></td>\n<td>7.1</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure DevOps</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21569\">CVE-2023-21569</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET and Visual Studio</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24895\">CVE-2023-24895</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24896\">CVE-2023-24896</a></td>\n<td>5.4</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET and Visual Studio</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24897\">CVE-2023-24897</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET and Visual Studio</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24936\">CVE-2023-24936</a></td>\n<td>8.1</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows CryptoAPI</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24937\">CVE-2023-24937</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows CryptoAPI</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24938\">CVE-2023-24938</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-28310\">CVE-2023-28310</a></td>\n<td>8.0</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET Framework</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29326\">CVE-2023-29326</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET Core</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29331\">CVE-2023-29331</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>NuGet Client</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29337\">CVE-2023-29337</a></td>\n<td>7.1</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29345\">CVE-2023-29345</a></td>\n<td>6.1</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows NTFS</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29346\">CVE-2023-29346</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/Line truncated
+1 -1
View File
@@ -1 +1 @@
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"updates-this-month\">Updates this Month</h2>\n<p>This release consists of security updates for the following products, features and roles.</p>\n<ul>\n<li>Azure</li>\n<li>Client Server Run-time Subsystem (CSRSS)</li>\n<li>Internet Control Message Protocol (ICMP)</li>\n<li>Microsoft Bluetooth Driver</li>\n<li>Microsoft Dynamics</li>\n<li>Microsoft Edge (Chromium-based)</li>\n<li>Microsoft Graphics Component</li>\n<li>Microsoft Office Excel</li>\n<li>Microsoft Office Outlook</li>\n<li>Microsoft Office SharePoint</li>\n<li>Microsoft OneDrive</li>\n<li>Microsoft PostScript Printer Driver</li>\n<li>Microsoft Printer Drivers</li>\n<li>Microsoft Windows Codecs Library</li>\n<li>Office for Android</li>\n<li>Remote Access Service Point-to-Point Tunneling Protocol</li>\n<li>Role: DNS Server</li>\n<li>Role: Windows Hyper-V</li>\n<li>Service Fabric</li>\n<li>Visual Studio</li>\n<li>Windows Accounts Control</li>\n<li>Windows Bluetooth Service</li>\n<li>Windows Central Resource Manager</li>\n<li>Windows Cryptographic Services</li>\n<li>Windows Defender</li>\n<li>Windows HTTP Protocol Stack</li>\n<li>Windows HTTP.sys</li>\n<li>Windows Internet Key Exchange (IKE) Protocol</li>\n<li>Windows Kernel</li>\n<li>Windows Partition Management Driver</li>\n<li>Windows Point-to-Point Protocol over Ethernet (PPPoE)</li>\n<li>Windows Remote Procedure Call</li>\n<li>Windows Remote Procedure Call Runtime</li>\n<li>Windows Resilient File System (ReFS)</li>\n<li>Windows Secure Channel</li>\n<li>Windows SmartScreen</li>\n<li>Windows TPM</li>\n<li>Windows Win32K</li>\n</ul>\n<p>Please note the following information regarding the security updates:</p>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>January 6, 2023</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2023/01/06/publishing-cbl-mariner-cves-on-the-security-update-guide-cvrf-api/\">Publishing CBL-Mariner CVEs on the Security Update Guide CVRF API</a></td>\n</tr>\n<tr>\n<td>December 29, 2022</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2022/12/29/security-update-guide-improvement-representing-hotpatch-updates/\">Security Update Guide Improvement – Representing Hotpatch Updates</a></td>\n</tr>\n<tr>\n<td>August 9, 2022</td>\n<td><a href=\"https://aka.ms/SUGNotificationProfile2\">Security Update Guide Notification System News: Create your profile now</a></td>\n</tr>\n<tr>\n<td>January 11, 2022</td>\n<td><a href=\"https://aka.ms/SUGNotificationProfile\">Coming Soon: New Security Update Guide Notification System</a></td>\n</tr>\n<tr>\n<td>February 9, 2021</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2021/02/09/continuing-to-listen-good-news-about-the-security-update-guide-api/\">Continuing to Listen: Good News about the Security Update Guide API</a></td>\n</tr>\n<tr>\n<td>January 13, 2021</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/\">Security Update Guide Supports CVEs Assigned by Industry Partners</a></td>\n</tr>\n<tr>\n<td>December 8, 2020</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2020/12/08/security-update-guide-lets-keep-the-conversation-going/\">Security Update Guide: Let’s keep the conversation going</a></td>\n</tr>\n<tr>\n<td>November 9, 2020</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2020/11/09/vulnerability-descriptions-in-the-new-version-of-the-security-update-guide/\">Vulnerability Descriptions in the New Version of the Security Update Guide</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-information\">Relevant Information</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A list of the latest servicing stack updates for each operating system can be found in <a href=\"https://msrc.microsoft.com/update-guide/en-us/vulnerLine truncated
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"updates-this-month\">Updates this Month</h2>\n<p>This release consists of security updates for the following products, features and roles.</p>\n<ul>\n<li>Azure</li>\n<li>Client Server Run-time Subsystem (CSRSS)</li>\n<li>Internet Control Message Protocol (ICMP)</li>\n<li>Microsoft Bluetooth Driver</li>\n<li>Microsoft Dynamics</li>\n<li>Microsoft Edge (Chromium-based)</li>\n<li>Microsoft Graphics Component</li>\n<li>Microsoft Office Excel</li>\n<li>Microsoft Office Outlook</li>\n<li>Microsoft Office SharePoint</li>\n<li>Microsoft OneDrive</li>\n<li>Microsoft PostScript Printer Driver</li>\n<li>Microsoft Printer Drivers</li>\n<li>Microsoft Windows Codecs Library</li>\n<li>Office for Android</li>\n<li>Remote Access Service Point-to-Point Tunneling Protocol</li>\n<li>Role: DNS Server</li>\n<li>Role: Windows Hyper-V</li>\n<li>Service Fabric</li>\n<li>Visual Studio</li>\n<li>Windows Accounts Control</li>\n<li>Windows Bluetooth Service</li>\n<li>Windows Central Resource Manager</li>\n<li>Windows Cryptographic Services</li>\n<li>Windows Defender</li>\n<li>Windows HTTP Protocol Stack</li>\n<li>Windows HTTP.sys</li>\n<li>Windows Internet Key Exchange (IKE) Protocol</li>\n<li>Windows Kernel</li>\n<li>Windows Partition Management Driver</li>\n<li>Windows Point-to-Point Protocol over Ethernet (PPPoE)</li>\n<li>Windows Remote Procedure Call</li>\n<li>Windows Remote Procedure Call Runtime</li>\n<li>Windows Resilient File System (ReFS)</li>\n<li>Windows Secure Channel</li>\n<li>Windows SmartScreen</li>\n<li>Windows TPM</li>\n<li>Windows Win32K</li>\n</ul>\n<p>Please note the following information regarding the security updates:</p>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>January 6, 2023</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2023/01/06/publishing-cbl-mariner-cves-on-the-security-update-guide-cvrf-api/\">Publishing CBL-Mariner CVEs on the Security Update Guide CVRF API</a></td>\n</tr>\n<tr>\n<td>December 29, 2022</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2022/12/29/security-update-guide-improvement-representing-hotpatch-updates/\">Security Update Guide Improvement – Representing Hotpatch Updates</a></td>\n</tr>\n<tr>\n<td>August 9, 2022</td>\n<td><a href=\"https://aka.ms/SUGNotificationProfile2\">Security Update Guide Notification System News: Create your profile now</a></td>\n</tr>\n<tr>\n<td>January 11, 2022</td>\n<td><a href=\"https://aka.ms/SUGNotificationProfile\">Coming Soon: New Security Update Guide Notification System</a></td>\n</tr>\n<tr>\n<td>February 9, 2021</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2021/02/09/continuing-to-listen-good-news-about-the-security-update-guide-api/\">Continuing to Listen: Good News about the Security Update Guide API</a></td>\n</tr>\n<tr>\n<td>January 13, 2021</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/\">Security Update Guide Supports CVEs Assigned by Industry Partners</a></td>\n</tr>\n<tr>\n<td>December 8, 2020</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2020/12/08/security-update-guide-lets-keep-the-conversation-going/\">Security Update Guide: Let’s keep the conversation going</a></td>\n</tr>\n<tr>\n<td>November 9, 2020</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2020/11/09/vulnerability-descriptions-in-the-new-version-of-the-security-update-guide/\">Vulnerability Descriptions in the New Version of the Security Update Guide</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-information\">Relevant Information</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A list of the latest servicing stack updates for each operating system can be found in <a href=\"https://msrc.microsoft.com/update-guide/en-us/vulnerLine truncated
+1 -1
View File
@@ -1 +1 @@
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-40-microsoft-cves\">This release consists of the following 40 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Microsoft Teams</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24881\">CVE-2023-24881</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows SMB</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24898\">CVE-2023-24898</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Graphics Component</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24899\">CVE-2023-24899</a></td>\n<td>7.0</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows NTLM</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24900\">CVE-2023-24900</a></td>\n<td>5.9</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows NFS Portmapper</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24901\">CVE-2023-24901</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Win32K</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24902\">CVE-2023-24902</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Secure Socket Tunneling Protocol (SSTP)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24903\">CVE-2023-24903</a></td>\n<td>8.1</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Installer</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24904\">CVE-2023-24904</a></td>\n<td>7.1</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Remote Desktop Client</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24905\">CVE-2023-24905</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Secure Boot</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24932\">CVE-2023-24932</a></td>\n<td>6.2</td>\n<td>CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows NFS Portmapper</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24939\">CVE-2023-24939</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Reliable Multicast Transport Driver (RMCAST)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24940\">CVE-2023-24940</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Network File System</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24941\">CVE-2023-24941</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Windows Remote Procedure Call Runtime</td>\n<td><a href=\"https://portal.msrc.microsoftLine truncated
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-40-microsoft-cves\">This release consists of the following 40 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Microsoft Teams</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24881\">CVE-2023-24881</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows SMB</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24898\">CVE-2023-24898</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Graphics Component</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24899\">CVE-2023-24899</a></td>\n<td>7.0</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows NTLM</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24900\">CVE-2023-24900</a></td>\n<td>5.9</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows NFS Portmapper</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24901\">CVE-2023-24901</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Win32K</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24902\">CVE-2023-24902</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Secure Socket Tunneling Protocol (SSTP)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24903\">CVE-2023-24903</a></td>\n<td>8.1</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Installer</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24904\">CVE-2023-24904</a></td>\n<td>7.1</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Remote Desktop Client</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24905\">CVE-2023-24905</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Secure Boot</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24932\">CVE-2023-24932</a></td>\n<td>6.2</td>\n<td>CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows NFS Portmapper</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24939\">CVE-2023-24939</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Reliable Multicast Transport Driver (RMCAST)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24940\">CVE-2023-24940</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Network File System</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-24941\">CVE-2023-24941</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Windows Remote Procedure Call Runtime</td>\n<td><a href=\"https://portal.msrc.microsoftLine truncated
+1 -1
View File
@@ -1 +1 @@
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-63-microsoft-cves\">This release consists of the following 63 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36007\">CVE-2023-36007</a></td>\n<td>7.6</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36014\">CVE-2023-36014</a></td>\n<td>7.3</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36016\">CVE-2023-36016</a></td>\n<td>6.2</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Scripting</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36017\">CVE-2023-36017</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Visual Studio Code</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36018\">CVE-2023-36018</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36021\">CVE-2023-36021</a></td>\n<td>8.0</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36022\">CVE-2023-36022</a></td>\n<td>6.6</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36024\">CVE-2023-36024</a></td>\n<td>7.1</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows SmartScreen</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36025\">CVE-2023-36025</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C</td>\n<td>Exploitation Detected</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36027\">CVE-2023-36027</a></td>\n<td>7.1</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Protected EAP (PEAP)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36028\">CVE-2023-36028</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36029\">CVE-2023-36029</a></td>\n<td>4.3</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:T/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics 365 Sales</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36030\">CVE-2023-36030</a></td>\n<td>6.1</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://Line truncated
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-63-microsoft-cves\">This release consists of the following 63 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36007\">CVE-2023-36007</a></td>\n<td>7.6</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36014\">CVE-2023-36014</a></td>\n<td>7.3</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36016\">CVE-2023-36016</a></td>\n<td>6.2</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Scripting</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36017\">CVE-2023-36017</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Visual Studio Code</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36018\">CVE-2023-36018</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36021\">CVE-2023-36021</a></td>\n<td>8.0</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36022\">CVE-2023-36022</a></td>\n<td>6.6</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36024\">CVE-2023-36024</a></td>\n<td>7.1</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows SmartScreen</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36025\">CVE-2023-36025</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C</td>\n<td>Exploitation Detected</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36027\">CVE-2023-36027</a></td>\n<td>7.1</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Protected EAP (PEAP)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36028\">CVE-2023-36028</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36029\">CVE-2023-36029</a></td>\n<td>4.3</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:T/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics 365 Sales</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36030\">CVE-2023-36030</a></td>\n<td>6.1</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://Line truncated
+1 -1
View File
@@ -1 +1 @@
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-103-microsoft-cves\">This release consists of the following 103 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows RDP</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29348\">CVE-2023-29348</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35349\">CVE-2023-35349</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Azure SDK</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36414\">CVE-2023-36414</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:W/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure SDK</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36415\">CVE-2023-36415</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36416\">CVE-2023-36416</a></td>\n<td>6.1</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36417\">CVE-2023-36417</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Real Time Operating System</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36418\">CVE-2023-36418</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36419\">CVE-2023-36419</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36420\">CVE-2023-36420</a></td>\n<td>7.3</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36429\">CVE-2023-36429</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36431\">CVE-2023-36431</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36433\">CVE-2023-36433</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows IIS</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36434\">CVE-2023-36434</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft QUIC</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36435\">CVE-2023-36435</a></td>\n<td>7.5Line truncated
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-103-microsoft-cves\">This release consists of the following 103 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows RDP</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29348\">CVE-2023-29348</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35349\">CVE-2023-35349</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Azure SDK</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36414\">CVE-2023-36414</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:W/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure SDK</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36415\">CVE-2023-36415</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36416\">CVE-2023-36416</a></td>\n<td>6.1</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36417\">CVE-2023-36417</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Real Time Operating System</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36418\">CVE-2023-36418</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36419\">CVE-2023-36419</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36420\">CVE-2023-36420</a></td>\n<td>7.3</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36429\">CVE-2023-36429</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36431\">CVE-2023-36431</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36433\">CVE-2023-36433</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows IIS</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36434\">CVE-2023-36434</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft QUIC</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36435\">CVE-2023-36435</a></td>\n<td>7.5Line truncated
+1 -1
View File
@@ -1 +1 @@
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-59-microsoft-cves\">This release consists of the following 59 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Microsoft Azure Kubernetes Service</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29332\">CVE-2023-29332</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure DevOps</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-33136\">CVE-2023-33136</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Cloud Files Mini Filter Driver</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35355\">CVE-2023-35355</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Identity Linux Broker</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36736\">CVE-2023-36736</a></td>\n<td>4.4</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>3D Viewer</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36739\">CVE-2023-36739</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>3D Viewer</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36740\">CVE-2023-36740</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Visual Studio Code</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36742\">CVE-2023-36742</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36744\">CVE-2023-36744</a></td>\n<td>8.0</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36745\">CVE-2023-36745</a></td>\n<td>8.0</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36756\">CVE-2023-36756</a></td>\n<td>8.0</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36757\">CVE-2023-36757</a></td>\n<td>8.0</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Visual Studio</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36758\">CVE-2023-36758</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Visual Studio</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36759\">CVE-2023-36759</a></td>\n<td>6.7</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>3D Viewer</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/Line truncated
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-59-microsoft-cves\">This release consists of the following 59 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Microsoft Azure Kubernetes Service</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29332\">CVE-2023-29332</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure DevOps</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-33136\">CVE-2023-33136</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Cloud Files Mini Filter Driver</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35355\">CVE-2023-35355</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Identity Linux Broker</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36736\">CVE-2023-36736</a></td>\n<td>4.4</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>3D Viewer</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36739\">CVE-2023-36739</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>3D Viewer</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36740\">CVE-2023-36740</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Visual Studio Code</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36742\">CVE-2023-36742</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36744\">CVE-2023-36744</a></td>\n<td>8.0</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36745\">CVE-2023-36745</a></td>\n<td>8.0</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36756\">CVE-2023-36756</a></td>\n<td>8.0</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36757\">CVE-2023-36757</a></td>\n<td>8.0</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Visual Studio</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36758\">CVE-2023-36758</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Visual Studio</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36759\">CVE-2023-36759</a></td>\n<td>6.7</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>3D Viewer</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/Line truncated