Microsoft update

KB5028167

IE Cumulative

Fixed in

Windows Server 2008 R2 for x64-based Systems Service Pack 1 1.001
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 1.001
Windows Server 2008 for 32-bit Systems Service Pack 2 1.001
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 1.001
Windows Server 2008 for x64-based Systems Service Pack 2 1.001
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 1.001
Windows Server 2012 1.001
Windows Server 2012 (Server Core installation) 1.001
Windows Server 2012 R2 1.001
Windows Server 2012 R2 (Server Core installation) 1.001

TI-2023-15351 CVE-2023-32046 · GHSA-6g7j-q2fm-9g6r

CRITICAL 93KEV

Windows MSHTML Platform Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.09969 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10

TI-2023-17675 CVE-2023-35336 · GHSA-mf2r-px65-975w

LOW 37

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00917 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +7 CWE-20

TI-2023-17649 CVE-2023-35308 · GHSA-wv6f-hghq-xmwp

LOW 37

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01114 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +7 CWE-73