Patch days / August 2023

Microsoft Patch Tuesday — August 2023

Tuesday, 8 August 2023

Vulnerabilities: 74
Critical: 4
High: 46
Zero-days: 1
Public exploit: 2

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.5
CVE-2023-38180 Zero-day .NET and Visual Studio Denial of Service Vulnerability
EPSS 14%

Critical 4

Critical 9.8
CVE-2023-21709 Microsoft Exchange Server Elevation of Privilege Vulnerability
EPSS 2%
Critical 9.8
CVE-2023-35385 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
EPSS 2.5%
Critical 9.8
CVE-2023-36910 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
EPSS 2.5%
Critical 9.8
CVE-2023-36911 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
EPSS 1.7%

Public exploit code 2

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2023-36899 Public exploit ASP.NET Elevation of Privilege Vulnerability
EPSS 77%
High 7.8
CVE-2023-36900 Public exploit Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 10%

All vulnerabilities 74

Critical4 Show

Critical 9.8
CVE-2023-21709 Microsoft Exchange Server Elevation of Privilege Vulnerability
EPSS 2%
Critical 9.8
CVE-2023-35385 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
EPSS 2.5%
Critical 9.8
CVE-2023-36910 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
EPSS 2.5%
Critical 9.8
CVE-2023-36911 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
EPSS 1.7%

High46 Show

High 7.5
CVE-2023-38180 Zero-day .NET and Visual Studio Denial of Service Vulnerability
EPSS 14%
High 8.8
CVE-2023-36899 Public exploit ASP.NET Elevation of Privilege Vulnerability
EPSS 77%
High 8.8
CVE-2023-29328 Microsoft Teams Remote Code Execution Vulnerability
EPSS 2.2%
High 8.8
CVE-2023-29330 Microsoft Teams Remote Code Execution Vulnerability
EPSS 2%
High 8.8
CVE-2023-35368 Microsoft Exchange Remote Code Execution Vulnerability
EPSS 2.5%
High 8.8
CVE-2023-35381 Windows Fax Service Remote Code Execution Vulnerability
EPSS 1.9%
High 8.8
CVE-2023-35387 Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
EPSS 1.1%
High 8.8
CVE-2023-36882 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2023-38169 Microsoft SQL OLE DB Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2023-38181 Microsoft Exchange Server Spoofing Vulnerability
EPSS 11%
High 8.8
CVE-2023-38185 Microsoft Exchange Server Remote Code Execution Vulnerability
EPSS 2.7%
High 8.8
CVE-2023-38186 Windows Mobile Device Management Elevation of Privilege Vulnerability
EPSS 1.3%
High 8.1
CVE-2023-36897 Visual Studio Tools for Office Runtime Spoofing Vulnerability
EPSS 1.7%
High 8.0
CVE-2023-35388 Microsoft Exchange Server Remote Code Execution Vulnerability
EPSS 6.8%
High 8.0
CVE-2023-36891 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 2%
High 8.0
CVE-2023-36892 Microsoft SharePoint Server Spoofing Vulnerability
EPSS 2%
High 8.0
CVE-2023-38182 Microsoft Exchange Server Remote Code Execution Vulnerability
EPSS 5.9%
High 7.8
CVE-2023-36900 Public exploit Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 10%
High 7.8
CVE-2023-35359 Windows Kernel Elevation of Privilege Vulnerability
EPSS 9.9%
High 7.8
CVE-2023-35371 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2023-35372 Microsoft Office Visio Remote Code Execution Vulnerability
High 7.8
CVE-2023-35379 Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability
High 7.8
CVE-2023-35380 Windows Kernel Elevation of Privilege Vulnerability
EPSS 3.6%
High 7.8
CVE-2023-35382 Windows Kernel Elevation of Privilege Vulnerability
EPSS 5.6%
High 7.8
CVE-2023-35386 Windows Kernel Elevation of Privilege Vulnerability
EPSS 5.5%
High 7.8
CVE-2023-35390 .NET and Visual Studio Remote Code Execution Vulnerability
EPSS 2.1%
High 7.8
CVE-2023-36865 Microsoft Office Visio Remote Code Execution Vulnerability
High 7.8
CVE-2023-36866 Microsoft Office Visio Remote Code Execution Vulnerability
High 7.8
CVE-2023-36895 Microsoft Outlook Remote Code Execution Vulnerability
EPSS 1%
High 7.8
CVE-2023-36896 Microsoft Excel Remote Code Execution Vulnerability
High 7.8
CVE-2023-36898 Tablet Windows User Interface Application Core Remote Code Execution Vulnerability
High 7.8
CVE-2023-36903 Windows System Assessment Tool Elevation of Privilege Vulnerability
EPSS 1.6%
High 7.8
CVE-2023-36904 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2023-38154 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2023-38170 HEVC Video Extensions Remote Code Execution Vulnerability
High 7.8
CVE-2023-38175 Microsoft Windows Defender Elevation of Privilege Vulnerability
High 7.5
CVE-2023-35383 Microsoft Message Queuing Information Disclosure Vulnerability
EPSS 3%
High 7.5
CVE-2023-36912 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 2.1%
High 7.5
CVE-2023-38172 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 2%
High 7.5
CVE-2023-38178 .NET Core and Visual Studio Denial of Service Vulnerability
EPSS 2.6%
High 7.5
CVE-2023-38184 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
EPSS 1.5%
High 7.4
CVE-2023-36873 .NET Framework Spoofing Vulnerability
EPSS 1.5%
High 7.2
CVE-2023-38167 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
EPSS 1.4%
High 7.1
CVE-2023-36876 Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability
High 7.0
CVE-2023-35378 Windows Projected File System Elevation of Privilege Vulnerability
High 7.0
CVE-2023-38176 Azure Arc-Enabled Servers Elevation of Privilege Vulnerability

Medium24 Show

Medium 6.5
CVE-2023-35376 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 2.2%
Medium 6.5
CVE-2023-35377 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 2.2%
Medium 6.5
CVE-2023-35389 Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Medium 6.5
CVE-2023-36890 Microsoft SharePoint Server Information Disclosure Vulnerability
EPSS 1.9%
Medium 6.5
CVE-2023-36893 Microsoft Outlook Spoofing Vulnerability
EPSS 2.2%
Medium 6.5
CVE-2023-36894 Microsoft SharePoint Server Information Disclosure Vulnerability
EPSS 2.1%
Medium 6.5
CVE-2023-36908 Windows Hyper-V Information Disclosure Vulnerability
Medium 6.5
CVE-2023-36909 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 2.1%
Medium 6.5
CVE-2023-36913 Microsoft Message Queuing Information Disclosure Vulnerability
EPSS 1.7%
Medium 6.5
CVE-2023-38157 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
EPSS 2.5%
Medium 6.5
CVE-2023-38254 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 1.6%
Medium 6.3
CVE-2023-36869 Azure DevOps Server Spoofing Vulnerability
Medium 6.2
CVE-2023-35391 ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
EPSS 1.9%
Medium 5.5
CVE-2023-36889 Windows Group Policy Security Feature Bypass Vulnerability
Medium 5.5
CVE-2023-36905 Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
EPSS 1.7%
Medium 5.5
CVE-2023-36906 Windows Cryptographic Services Information Disclosure Vulnerability
EPSS 2%
Medium 5.5
CVE-2023-36907 Windows Cryptographic Services Information Disclosure Vulnerability
EPSS 1.7%
Medium 5.5
CVE-2023-36914 Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability
Medium 5.4
CVE-2023-35384 Windows HTML Platforms Security Feature Bypass Vulnerability
EPSS 1.6%
Medium 4.6
CVE-2023-35394 Azure HDInsight Jupyter Notebook Spoofing Vulnerability
Medium 4.5
CVE-2023-35393 Azure Apache Hive Spoofing Vulnerability
EPSS 1.4%
Medium 4.5
CVE-2023-36877 Azure Apache Oozie Spoofing Vulnerability
EPSS 1%
Medium 4.5
CVE-2023-36881 Azure Apache Ambari Spoofing Vulnerability
EPSS 1%
Medium 4.5
CVE-2023-38188 Azure Apache Hadoop Spoofing Vulnerability
EPSS 1%