Sample Page Title

As we speak is Microsoft’s November 2023 Patch Tuesday, which incorporates safety updates for a complete of 58 flaws and 5 zero-day vulnerabilities.

Whereas fourteen distant code execution (RCE) bugs had been mounted, Microsoft solely rated one as essential. The three essential flaws mounted at present are an Azure data disclosure bug, an RCE in Home windows Web Connection Sharing (ICS), and a Hyper-V escape flaw that permits the executions of applications on the host with SYSTEM privileges.

The variety of bugs in every vulnerability class is listed under:

• 26 Elevation of Privilege Vulnerabilities
• 3 Safety Characteristic Bypass Vulnerabilities
• 45 Distant Code Execution Vulnerabilities
• 12 Data Disclosure Vulnerabilities
• 17 Denial of Service Vulnerabilities
• 1 Spoofing Vulnerabilities

The entire depend of 58 flaws doesn’t embrace 5 Mariner safety updates and 20 Microsoft Edge safety updates launched earlier this month.

To study extra in regards to the non-security updates launched at present, you possibly can overview our devoted articles on the brand new Home windows 11 KB5032190 cumulative replace and Home windows 10 KB5032189 cumulative replace.

5 zero-days mounted

This month’s Patch Tuesday fixes 5 zero-day vulnerabilities, with three exploited in assaults and three publicly disclosed.

Microsoft classifies a vulnerability as a zero-day whether it is publicly disclosed or actively exploited with no official repair out there.

The three actively exploited zero-day vulnerabilities in at present’s updates are:

CVE-2023-36036 – Home windows Cloud Recordsdata Mini Filter Driver Elevation of Privilege Vulnerability

Microsoft has mounted an actively exploited Home windows Cloud Recordsdata Mini Filter Elevation of Privileges bug.

“An attacker who efficiently exploited this vulnerability might acquire SYSTEM privileges,” explains Microsoft.

It isn’t recognized how the flaw was abused in assaults or by what menace actor.

The flaw was found internally by the Microsoft Menace Intelligence Microsoft Safety Response Heart.

CVE-2023-36033 – Home windows DWM Core Library Elevation of Privilege Vulnerability

Microsoft has mounted an actively exploited and publicly disclosed Home windows DWM Core Library vulnerability that can be utilized to raise privileges to SYSTEM.

“An attacker who efficiently exploited this vulnerability might acquire SYSTEM privileges,” explains Microsoft.

Microsoft says that the flaw was found by Quan Jin(@jq0904) with DBAPPSecurity WeBin Lab however didn’t share particulars on how they had been utilized in assaults.

CVE-2023-36025 – Home windows SmartScreen Safety Characteristic Bypass Vulnerability

Microsoft has mounted an actively exploited Home windows SmartScreen flaw that permits a malicious Web Shortcut to bypass safety checks and warnings.

“The attacker would have the ability to bypass Home windows Defender SmartScreen checks and their related prompts,” explains Microsoft.

“The person must click on on a specifically crafted Web Shortcut (.URL) or a hyperlink pointing to an Web Shortcut file to be compromised by the attacker,” continues Microsoft.

Microsoft says that the flaw was found by Will Metcalf (Splunk), Microsoft Menace Intelligence, and the Microsoft Workplace Product Group Safety Crew.

BleepingComputer contacted Splunk in regards to the flaw to study the way it was exploited.

As well as, Microsoft says that two different publicly disclosed zero-day bugs, ‘CVE-2023-36413 – Microsoft Workplace Safety Characteristic Bypass Vulnerability’ and the ‘CVE-2023-36038 — ASP.NET Core Denial of Service Vulnerability,’ had been additionally mounted as a part of at present’s Patch Tuesday.

Nevertheless, Microsoft says that they weren’t actively exploited in assaults.

Latest updates from different corporations

Different distributors who launched updates or advisories in November 2023 embrace:

The November 2023 Patch Tuesday Safety Updates

Beneath is the entire listing of resolved vulnerabilities within the November 2023 Patch Tuesday updates.

To entry the complete description of every vulnerability and the techniques it impacts, you possibly can view the full report right here.