Patch days / June 2023

Microsoft Patch Tuesday — June 2023

Tuesday, 13 June 2023

Vulnerabilities: 69
Critical: 4
High: 44
Zero-days: 0
Public exploit: 7

Exploited 2

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

Critical 9.8
CVE-2023-29357 Exploited Public exploit Microsoft SharePoint Server Elevation of Privilege Vulnerability
EPSS 100%
High 8.4
CVE-2023-29360 Exploited Public exploit Microsoft Streaming Service Elevation of Privilege Vulnerability
EPSS 22%

Critical 3

Critical 9.8
CVE-2023-29363 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
EPSS 1.9%
Critical 9.8
CVE-2023-32014 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
EPSS 1.9%
Critical 9.8
CVE-2023-32015 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
EPSS 2%

Public exploit code 5

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2023-33131 Public exploit Microsoft Outlook Remote Code Execution Vulnerability
EPSS 5.7%
High 8.8
CVE-2023-32031 Public exploit Microsoft Exchange Server Remote Code Execution Vulnerability
EPSS 81%
High 7.8
CVE-2023-33137 Public exploit Microsoft Excel Remote Code Execution Vulnerability
EPSS 2.7%
Medium 6.5
CVE-2023-33145 Public exploit Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
EPSS 8.6%
Low 3.3
CVE-2023-28303 Public exploit Windows Snipping Tool Information Disclosure Vulnerability
EPSS 2%

All vulnerabilities 69

Critical4 Show

Critical 9.8
CVE-2023-29357 Exploited Public exploit Microsoft SharePoint Server Elevation of Privilege Vulnerability
EPSS 100%
Critical 9.8
CVE-2023-29363 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
EPSS 1.9%
Critical 9.8
CVE-2023-32014 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
EPSS 1.9%
Critical 9.8
CVE-2023-32015 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
EPSS 2%

High44 Show

High 8.4
CVE-2023-29360 Exploited Public exploit Microsoft Streaming Service Elevation of Privilege Vulnerability
EPSS 22%
High 8.8
CVE-2023-33131 Public exploit Microsoft Outlook Remote Code Execution Vulnerability
EPSS 5.7%
High 8.8
CVE-2023-32031 Public exploit Microsoft Exchange Server Remote Code Execution Vulnerability
EPSS 81%
High 8.8
CVE-2023-29362 Remote Desktop Client Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2023-29372 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2023-29373 Microsoft ODBC Driver Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2023-32009 Windows Collaborative Translation Framework Elevation of Privilege Vulnerability
High 8.1
CVE-2023-29351 Windows Group Policy Elevation of Privilege Vulnerability
EPSS 1.8%
High 8.0
CVE-2023-28310 Microsoft Exchange Server Remote Code Execution Vulnerability
EPSS 25%
High 7.8
CVE-2023-33137 Public exploit Microsoft Excel Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2023-24895 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
EPSS 1.1%
High 7.8
CVE-2023-24897 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
EPSS 1.2%
High 7.8
CVE-2023-29326 .NET Framework Remote Code Execution Vulnerability
High 7.8
CVE-2023-29346 NTFS Elevation of Privilege Vulnerability
High 7.8
CVE-2023-29358 Windows GDI Elevation of Privilege Vulnerability
EPSS 4.7%
High 7.8
CVE-2023-29359 GDI Elevation of Privilege Vulnerability
High 7.8
CVE-2023-29365 Windows Media Remote Code Execution Vulnerability
High 7.8
CVE-2023-29366 Windows Geolocation Service Remote Code Execution Vulnerability
High 7.8
CVE-2023-29367 iSCSI Target WMI Provider Remote Code Execution Vulnerability
High 7.8
CVE-2023-29370 Windows Media Remote Code Execution Vulnerability
High 7.8
CVE-2023-29371 Windows GDI Elevation of Privilege Vulnerability
EPSS 5.4%
High 7.8
CVE-2023-32008 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
High 7.8
CVE-2023-32012 Windows Container Manager Service Elevation of Privilege Vulnerability
High 7.8
CVE-2023-32017 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
High 7.8
CVE-2023-32018 Windows Hello Remote Code Execution Vulnerability
High 7.8
CVE-2023-32029 Microsoft Excel Remote Code Execution Vulnerability
EPSS 54%
High 7.8
CVE-2023-33133 Microsoft Excel Remote Code Execution Vulnerability
EPSS 44%
High 7.8
CVE-2023-33146 Microsoft Office Remote Code Execution Vulnerability
High 7.6
CVE-2023-32022 Windows Server Service Security Feature Bypass Vulnerability
High 7.5
CVE-2023-24936 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
EPSS 1.6%
High 7.5
CVE-2023-29331 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability
EPSS 2.6%
High 7.5
CVE-2023-32011 Windows iSCSI Discovery Service Denial of Service Vulnerability
EPSS 1.9%
High 7.5
CVE-2023-32030 .NET and Visual Studio Denial of Service Vulnerability
EPSS 2.2%
High 7.3
CVE-2023-33126 .NET and Visual Studio Remote Code Execution Vulnerability
High 7.3
CVE-2023-33128 .NET and Visual Studio Remote Code Execution Vulnerability
High 7.3
CVE-2023-33130 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 1.2%
High 7.3
CVE-2023-33135 .NET and Visual Studio Elevation of Privilege Vulnerability
High 7.1
CVE-2023-21565 Azure DevOps Server Spoofing Vulnerability
High 7.1
CVE-2023-29337 NuGet Client Remote Code Execution Vulnerability
EPSS 1.1%
High 7.1
CVE-2023-32021 Windows SMB Witness Service Security Feature Bypass Vulnerability
EPSS 1.2%
High 7.0
CVE-2023-29361 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
EPSS 4%
High 7.0
CVE-2023-29364 Windows Authentication Elevation of Privilege Vulnerability
High 7.0
CVE-2023-29368 Windows Filtering Platform Elevation of Privilege Vulnerability
High 7.0
CVE-2023-32010 Windows Bus Filter Driver Elevation of Privilege Vulnerability

Medium19 Show

Medium 6.6
CVE-2023-33144 Visual Studio Code Spoofing Vulnerability
EPSS 1.3%
Medium 6.5
CVE-2023-33145 Public exploit Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
EPSS 8.6%
Medium 6.5
CVE-2023-24937 Windows CryptoAPI Denial of Service Vulnerability
EPSS 2.1%
Medium 6.5
CVE-2023-24938 Windows CryptoAPI Denial of Service Vulnerability
EPSS 2%
Medium 6.5
CVE-2023-29352 Windows Remote Desktop Security Feature Bypass Vulnerability
EPSS 1.2%
Medium 6.5
CVE-2023-29369 Remote Procedure Call Runtime Denial of Service Vulnerability
EPSS 2%
Medium 6.5
CVE-2023-32032 .NET and Visual Studio Elevation of Privilege Vulnerability
Medium 6.5
CVE-2023-33129 Microsoft SharePoint Server Denial of Service Vulnerability
EPSS 2%
Medium 6.5
CVE-2023-33140 Microsoft OneNote Spoofing Vulnerability
EPSS 1.6%
Medium 6.5
CVE-2023-33142 Microsoft SharePoint Server Elevation of Privilege Vulnerability
EPSS 1%
Medium 6.3
CVE-2023-33132 Microsoft SharePoint Server Spoofing Vulnerability
Medium 5.6
CVE-2023-32020 Windows DNS Spoofing Vulnerability
Medium 5.5
CVE-2023-21569 Azure DevOps Server Spoofing Vulnerability
Medium 5.5
CVE-2023-29353 Sysinternals Process Monitor for Windows Denial of Service Vulnerability
Medium 5.5
CVE-2023-32016 Windows Installer Information Disclosure Vulnerability
Medium 5.5
CVE-2023-33139 Visual Studio Information Disclosure Vulnerability
Medium 5.3
CVE-2023-29355 DHCP Server Service Information Disclosure Vulnerability
EPSS 1.3%
Medium 5.3
CVE-2023-32013 Windows Hyper-V Denial of Service Vulnerability
EPSS 1.6%
Medium 4.7
CVE-2023-32019 Windows Kernel Information Disclosure Vulnerability
EPSS 1.4%

Low2 Show

Low 3.3
CVE-2023-28303 Public exploit Windows Snipping Tool Information Disclosure Vulnerability
EPSS 2%
Low 3.0
CVE-2023-32024 Microsoft Power Apps Spoofing Vulnerability
EPSS 1.5%

Most affected products

Windows Server 2022 34 · 3 crit.
Windows Server 2019 32 · 3 crit.
Windows Server 2019 (Server Core installation) 32 · 3 crit.
Windows 11 version 22H2 31 · 3 crit.
Windows 10 Version 21H2 29 · 3 crit.
Windows 10 Version 22H2 29 · 3 crit.
Windows 11 version 21H2 29 · 3 crit.
Windows Server 2016 28 · 3 crit.
Windows Server 2016 (Server Core installation) 28 · 3 crit.
Windows 10 Version 1809 26 · 3 crit.
Windows Server 2012 R2 23 · 3 crit.
Windows Server 2012 R2 (Server Core installation) 23 · 3 crit.

About this page

CVEs published by Microsoft as CVE numbering authority from the day before to two days after its patch day (13 Jun). Exploitation status is updated daily, so a vulnerability can turn red after the release.

All Microsoft vulnerabilities →