Week 41, 2023

9–15 October 2023

New CVEs: 645
Critical: 44
High: 212
Newly exploited: 5
Advisories: 337
Malicious pkgs: 63

Newly exploited 5

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

High 7.8
CVE-2023-21608 KEV Oct 10, 2023 Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability
Adobe · Acrobat Reader

EPSS 59%
High 7.5
CVE-2023-44487 KEV Oct 10, 2023 HTTP/2 Stream Cancellation Attack
EPSS 100%
Medium 6.6
CVE-2023-20109 KEV Oct 10, 2023 A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remo…
Cisco · Cisco IOS XE Software · IOS

EPSS 2.5%
Medium 6.5
CVE-2023-36563 KEV Oct 10, 2023 Microsoft WordPad Information Disclosure Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 20%
Medium 5.3
CVE-2023-41763 KEV Oct 10, 2023 Skype for Business Elevation of Privilege Vulnerability
Microsoft · Skype for Business Server 2015 CU13 · Skype for Business Server 2019 CU7

EPSS 90%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.4
CVE-2023-4966 Unauthenticated sensitive information disclosure
Citrix · NetScaler ADC  · NetScaler Gateway

EPSS 100%
Critical 9.7
CVE-2023-34992 A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized …
Fortinet · FortiSIEM

EPSS 82%
Critical 10.0
CVE-2023-45138 Change Request Application vulnerable to XSS and remote code execution through change request title
xwiki-contrib · application-changerequest

EPSS 72%
Critical 9.8
CVE-2023-30806 Sangfor Next-Gen Application Firewall PHPSESSID Command Injection
Sangfor · Net-Gen Application Firewall

EPSS 65%
Critical 9.8
CVE-2023-30805 Sangfor Next-Gen Application Firewall Login Un Param Command Injection
Sangfor · Net-Gen Application Firewall

EPSS 65%
Critical 9.8
CVE-2023-32645 A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can l…
Yifan · YF325

EPSS 55%
Critical 9.1
CVE-2023-43661 Cachet vulnerable to Authenticated Remote Code Execution
cachethq · cachet

EPSS 49%
Critical 9.6
CVE-2023-34993 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through…
Fortinet · FortiWLM

EPSS 21%
Critical 9.8
CVE-2023-30803 Sangfor Next-Gen Application Firewall Authentication Bypass
Sangfor · Net-Gen Application Firewall

EPSS 21%
Critical 9.8
CVE-2023-35349 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 2.9%
Critical 9.6
CVE-2023-36548 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through…
Fortinet · FortiWLM

EPSS 2.5%
Critical 9.6
CVE-2023-36547 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through…
Fortinet · FortiWLM

EPSS 2.5%
Critical 9.6
CVE-2023-36550 A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through…
Fortinet · FortiWLM

EPSS 2.5%
Critical 9.9
CVE-2023-41373 BIG-IP Configuration Utility vulnerability
F5 · BIG-IP

EPSS 2.3%
Critical 9.8
CVE-2023-36434 Windows IIS Server Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 2.3%

All 44 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

High 7.5
CVE-2023-44487 HTTP/2 Stream Cancellation Attack
EPSS 100%
Medium 5.3
CVE-2023-41763 Skype for Business Elevation of Privilege Vulnerability
Microsoft · Skype for Business Server 2015 CU13 · Skype for Business Server 2019 CU7

EPSS 90%
High 7.5
CVE-2023-38171 Microsoft QUIC Denial of Service Vulnerability
Microsoft · Windows Server 2022 · Windows 11 version 22H2 · Windows 11 version 21H2

EPSS 71%
High 7.5
CVE-2023-36606 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 69%
Medium 4.9
CVE-2023-30804 Sangfor Next-Gen Application Firewall Authenticated File Disclosure
Sangfor · Next-Gen Application Firewall (NGAF)

EPSS 39%
High 7.5
CVE-2023-45363 MediaWiki Denial of Service vulnerability
EPSS 24%
High 8.8
CVE-2023-44959 An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Address fields of the…
EPSS 23%
Medium 6.5
CVE-2023-36563 Microsoft WordPad Information Disclosure Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

EPSS 20%

Advisories

WID-SEC-2023-2606 Microsoft Windows und Microsoft Windows Server: Mehrere Schwachstellen 81 CVEs
USN-6422-1 ring vulnerabilities 20 CVEs
SSA-843070 SSA-843070: Multiple Vulnerabilities in SCALANCE W1750D 13 CVEs
ICSA-23-285-02 Siemens SCALANCE W1750D 13 CVEs
DSA-5527-1 webkit2gtk - security update 10 CVEs
WID-SEC-2023-2655 Node.js: Mehrere Schwachstellen 6 CVEs
SUSE-SU-2023:4016-1 Security update for MozillaThunderbird 6 CVEs
SUSE-SU-2023:4046-1 Security update for samba 5 CVEs
DSA-5525-1 samba - security update 5 CVEs
ICSA-23-285-12 Weintek cMT3000 HMI Web CGI 3 CVEs