Microsoft Patch Tuesday — May 2023

Tuesday, 9 May 2023

Vulnerabilities: 36
Critical: 2
High: 23
Zero-days: 1
Public exploit: 5

Exploited 2

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.8
CVE-2023-29336 Zero-day Public exploit Win32k Elevation of Privilege Vulnerability
EPSS 41%
High 7.2
CVE-2023-24955 Exploited Public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 85%

Critical 2

Critical 9.8
CVE-2023-24941 Windows Network File System Remote Code Execution Vulnerability
EPSS 95%
Critical 9.8
CVE-2023-24943 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
EPSS 4.7%

Public exploit code 3

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 7.8
CVE-2023-29343 Public exploit SysInternals Sysmon for Windows Elevation of Privilege Vulnerability
EPSS 1.8%
Medium 6.7
CVE-2023-24932 Public exploit Secure Boot Security Feature Bypass Vulnerability
EPSS 12%
Medium 6.5
CVE-2023-29324 Public exploit Windows MSHTML Platform Security Feature Bypass Vulnerability
EPSS 2.8%

All vulnerabilities 36

Critical2 Show

Critical 9.8
CVE-2023-24941 Windows Network File System Remote Code Execution Vulnerability
EPSS 95%
Critical 9.8
CVE-2023-24943 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
EPSS 4.7%

High23 Show

High 7.8
CVE-2023-29336 Zero-day Public exploit Win32k Elevation of Privilege Vulnerability
EPSS 41%
High 7.2
CVE-2023-24955 Exploited Public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 85%
High 8.8
CVE-2023-24947 Windows Bluetooth Driver Remote Code Execution Vulnerability
High 8.1
CVE-2023-24903 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
High 8.1
CVE-2023-28283 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
High 8.1
CVE-2023-29325 Windows OLE Remote Code Execution Vulnerability
EPSS 84%
High 7.8
CVE-2023-29343 Public exploit SysInternals Sysmon for Windows Elevation of Privilege Vulnerability
EPSS 1.8%
High 7.8
CVE-2023-24902 Win32k Elevation of Privilege Vulnerability
EPSS 5.1%
High 7.8
CVE-2023-24905 Remote Desktop Client Remote Code Execution Vulnerability
High 7.8
CVE-2023-24946 Windows Backup Service Elevation of Privilege Vulnerability
High 7.8
CVE-2023-24949 Windows Kernel Elevation of Privilege Vulnerability
EPSS 25%
High 7.8
CVE-2023-24953 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2023-29340 AV1 Video Extension Remote Code Execution Vulnerability
High 7.8
CVE-2023-29341 AV1 Video Extension Remote Code Execution Vulnerability
High 7.5
CVE-2023-24898 Windows SMB Denial of Service Vulnerability
EPSS 2.1%
High 7.5
CVE-2023-24901 Windows NFS Portmapper Information Disclosure Vulnerability
EPSS 1.6%
High 7.5
CVE-2023-24939 Server for NFS Denial of Service Vulnerability
EPSS 4.7%
High 7.5
CVE-2023-24940 Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability
EPSS 5.2%
High 7.5
CVE-2023-24942 Remote Procedure Call Runtime Denial of Service Vulnerability
EPSS 1.9%
High 7.5
CVE-2023-29335 Microsoft Word Security Feature Bypass Vulnerability
EPSS 1.2%
High 7.4
CVE-2023-24948 Windows Bluetooth Driver Elevation of Privilege Vulnerability
High 7.1
CVE-2023-24904 Windows Installer Elevation of Privilege Vulnerability
High 7.0
CVE-2023-24899 Windows Graphics Component Elevation of Privilege Vulnerability

Medium10 Show

Medium 6.7
CVE-2023-24932 Public exploit Secure Boot Security Feature Bypass Vulnerability
EPSS 12%
Medium 6.6
CVE-2023-29338 Visual Studio Code Spoofing Vulnerability
Medium 6.5
CVE-2023-29324 Public exploit Windows MSHTML Platform Security Feature Bypass Vulnerability
EPSS 2.8%
Medium 6.5
CVE-2023-24944 Windows Bluetooth Driver Information Disclosure Vulnerability
Medium 6.5
CVE-2023-24950 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 67%
Medium 6.5
CVE-2023-24954 Microsoft SharePoint Server Information Disclosure Vulnerability
EPSS 1.8%
Medium 5.9
CVE-2023-24900 Windows NTLM Security Support Provider Information Disclosure Vulnerability
EPSS 1.2%
Medium 5.5
CVE-2023-24945 Windows iSCSI Target Service Information Disclosure Vulnerability
Medium 5.5
CVE-2023-28251 Windows Driver Revocation List Security Feature Bypass Vulnerability
Medium 5.3
CVE-2023-28290 Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability
EPSS 1.2%

Low1 Show

Low 3.3
CVE-2023-29333 Microsoft Access Denial of Service Vulnerability