Microsoft update

KB5028171

Security Update

View on Microsoft →

Fixed in

Windows Server 2022 10.0.20348.1850
Windows Server 2022 (Server Core installation) 10.0.20348.1850

Fixes 99 records

TI-2023-15353 CVE-2023-32049 · GHSA-8q3q-pcch-j42x

Windows SmartScreen Security Feature Bypass Vulnerability

CRITICAL 97KEV

Windows SmartScreen Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04156 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5

TI-2023-18662 CVE-2023-36874 · GHSA-j95h-qvx8-jp23

Windows Error Reporting Service Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.42564 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-59

TI-2023-15351 CVE-2023-32046 · GHSA-6g7j-q2fm-9g6r

Windows MSHTML Platform Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows MSHTML Platform Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.09969 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10

TI-2023-15361 CVE-2023-32057 · GHSA-3p9w-cf27-62fv

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

MEDIUM 53

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02207 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-20

TI-2023-17704 CVE-2023-35366 · GHSA-vprf-7c8r-mgc2

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 52

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01689 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-20

TI-2023-17703 CVE-2023-35365 · GHSA-768m-86pq-jxm6

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 52

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01768 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-20

TI-2023-17705 CVE-2023-35367 · GHSA-2h3v-mhq3-rf2w

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

MEDIUM 46

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01689 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-20

TI-2023-15360 CVE-2023-32056 · GHSA-vw92-69jm-2965

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

MEDIUM 45

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0124 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +4 CWE-59

TI-2023-16331 CVE-2023-33154 · GHSA-pw39-fr77-mc42

Windows Partition Management Driver Elevation of Privilege Vulnerability

MEDIUM 44

Windows Partition Management Driver Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00791 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-367

TI-2023-17678 CVE-2023-35339 · GHSA-8rhc-38cp-m68h

Windows CryptoAPI Denial of Service Vulnerability

MEDIUM 43

Windows CryptoAPI Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01886 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +6 CWE-400

TI-2023-17677 CVE-2023-35338 · GHSA-9m3p-jcwj-fgwg

Windows Peer Name Resolution Protocol Denial of Service Vulnerability

MEDIUM 43

Windows Peer Name Resolution Protocol Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01961 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-476

TI-2023-17670 CVE-2023-35330 · GHSA-xv87-56gx-3f4x

Windows Extended Negotiation Denial of Service Vulnerability

MEDIUM 43

Windows Extended Negotiation Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01861 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +9 CWE-126

TI-2023-17663 CVE-2023-35322 · GHSA-4j2q-mx4g-ppwf

Windows Deployment Services Remote Code Execution Vulnerability

MEDIUM 43

Windows Deployment Services Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01386 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-121

TI-2023-17645 CVE-2023-35303 · GHSA-vpc7-vq8w-p94m

USB Audio Class System Driver Remote Code Execution Vulnerability

MEDIUM 43

USB Audio Class System Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01454 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-20

TI-2023-17644 CVE-2023-35302 · GHSA-458h-vprj-79h8

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01439 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +8 CWE-122

TI-2023-17643 CVE-2023-35300 · GHSA-6x84-85qm-g3mj

Remote Procedure Call Runtime Remote Code Execution Vulnerability

MEDIUM 43

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01386 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-416

TI-2023-15343 CVE-2023-32038 · GHSA-97hj-39wf-25fm

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01236 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-416

TI-2023-17691 CVE-2023-35352 · GHSA-phmx-5487-mrq7

Windows Remote Desktop Security Feature Bypass Vulnerability

MEDIUM 42

Windows Remote Desktop Security Feature Bypass Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01371 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +3 CWE-693

TI-2023-17666 CVE-2023-35325 · GHSA-g366-j7wx-g269

Windows Print Spooler Information Disclosure Vulnerability

MEDIUM 42

Windows Print Spooler Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0179 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +8 CWE-908

TI-2023-17641 CVE-2023-35298 · GHSA-3wg4-9v5r-3g2h

HTTP.sys Denial of Service Vulnerability

MEDIUM 42

HTTP.sys Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01778 Published 2023-07-11 Fixed in 10.0.20348.1850, 10.0.22000.2176 +1 CWE-400

TI-2023-15388 CVE-2023-32084 · GHSA-w972-j732-pqr4

HTTP.sys Denial of Service Vulnerability

MEDIUM 42

HTTP.sys Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01778 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +2 CWE-476

TI-2023-15350 CVE-2023-32045 · GHSA-hppg-98q6-r92c

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 42

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01519 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-15349 CVE-2023-32044 · GHSA-8x32-mp9p-q4c3

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 42

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01519 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-17702 CVE-2023-35364 · GHSA-rrxg-26hj-h649

Windows Kernel Elevation of Privilege Vulnerability

MEDIUM 41

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00543 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +4 CWE-190

TI-2023-17656 CVE-2023-35315 · GHSA-hfgw-vpgg-3742

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

MEDIUM 41

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00681 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +4 CWE-190

TI-2022-17740 CVE-2022-38023 · GHSA-vww6-8mc9-cqg6

Netlogon RPC Elevation of Privilege Vulnerability

MEDIUM 40

Netlogon RPC Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02749 Published 2022-11-09 Partial fix · 6.0.6003.22175, 6.1.7601.26623 +5

TI-2023-17658 CVE-2023-35317 · GHSA-pcx7-hvg4-wg56

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

LOW 39

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01375 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +3 CWE-502

TI-2023-17640 CVE-2023-35297 · GHSA-qpq5-9xxj-wrcw

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

LOW 39

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01118 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-843

TI-2023-17696 CVE-2023-35358 · GHSA-r542-hcp7-v8mg

Windows Kernel Elevation of Privilege Vulnerability

LOW 38

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00872 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-125

TI-2023-17695 CVE-2023-35357 · GHSA-f44r-g94r-2hx6

Windows Kernel Elevation of Privilege Vulnerability

LOW 38

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00872 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-125

TI-2023-17701 CVE-2023-35363 · GHSA-2457-gqr3-47vq

Windows Kernel Elevation of Privilege Vulnerability

LOW 37

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00478 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +4 CWE-122

TI-2023-17692 CVE-2023-35353 · GHSA-5pmx-fh9q-r388

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

LOW 37

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0052 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-59

TI-2023-17681 CVE-2023-35342 · GHSA-5x9j-qq7v-qfgj

Windows Image Acquisition Elevation of Privilege Vulnerability

LOW 37

Windows Image Acquisition Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00494 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +9 CWE-59

TI-2023-17675 CVE-2023-35336 · GHSA-mf2r-px65-975w

Windows MSHTML Platform Security Feature Bypass Vulnerability

LOW 37

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00917 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +7 CWE-20

TI-2023-17664 CVE-2023-35323 · GHSA-3xxc-c29x-7gmx

Windows OLE Remote Code Execution Vulnerability

LOW 37

Windows OLE Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0065 Published 2023-07-11 Fixed in 10.0.20348.1850, 10.0.22000.2176 CWE-416

TI-2023-17654 CVE-2023-35313 · GHSA-mf75-mpj2-6ffp

Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability

LOW 37

Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0065 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +6 CWE-416

TI-2023-17653 CVE-2023-35312 · GHSA-w28h-vj63-44qh

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability

LOW 37

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00494 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +9 CWE-190

TI-2023-17649 CVE-2023-35308 · GHSA-wv6f-hghq-xmwp

Windows MSHTML Platform Security Feature Bypass Vulnerability

LOW 37

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01114 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +7 CWE-73

TI-2023-15357 CVE-2023-32053 · GHSA-xvch-pp92-23j8

Windows Installer Elevation of Privilege Vulnerability

LOW 37

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00484 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +9 CWE-59

TI-2023-17700 CVE-2023-35362 · GHSA-6h39-qhj9-7c95

Windows Clip Service Elevation of Privilege Vulnerability

LOW 36

Windows Clip Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00287 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +6 CWE-591

TI-2023-17694 CVE-2023-35356 · GHSA-wmv8-5f2q-h9xg

Windows Kernel Elevation of Privilege Vulnerability

LOW 36

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01156 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-843

TI-2023-17689 CVE-2023-35350 · GHSA-hfgr-2rrw-vrp6

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

LOW 36

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01223 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-122

TI-2023-17679 CVE-2023-35340 · GHSA-h2p6-vc37-qj4h

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

LOW 36

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00273 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-591

TI-2023-17676 CVE-2023-35337 · GHSA-4mq4-fj43-vm4p

Win32k Elevation of Privilege Vulnerability

LOW 36

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00436 Published 2023-07-11 Fixed in 10.0.20348.1850, 10.0.22000.2176 +3 CWE-122

TI-2023-17668 CVE-2023-35328 · GHSA-7frx-552p-qxq9

Windows Transaction Manager Elevation of Privilege Vulnerability

LOW 36

Windows Transaction Manager Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00428 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-197

TI-2023-17661 CVE-2023-35320 · GHSA-v322-3g64-3xrf

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

LOW 36

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00465 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-59

TI-2023-17650 CVE-2023-35309 · GHSA-f764-h978-44hh

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00791 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-591

TI-2023-17647 CVE-2023-35305 · GHSA-465v-9rhm-jhg9

Windows Kernel Elevation of Privilege Vulnerability

LOW 36

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00428 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-122

TI-2023-17646 CVE-2023-35304 · GHSA-69jp-5qwp-74j9

Windows Kernel Elevation of Privilege Vulnerability

LOW 36

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00428 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-122

TI-2023-17642 CVE-2023-35299 · GHSA-868r-pqhj-vm2g

Windows Common Log File System Driver Elevation of Privilege Vulnerability

LOW 36

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00411 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-16350 CVE-2023-33173 · GHSA-7qfg-wv73-x2cw

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 36

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-126

TI-2023-16349 CVE-2023-33172 · GHSA-qrw4-mx3q-78mq

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 36

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-126

TI-2023-16346 CVE-2023-33169 · GHSA-x7v2-mcmg-3x6c

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 36

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-126

TI-2023-16345 CVE-2023-33168 · GHSA-4f7g-j96w-63jv

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 36

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-126

TI-2023-16344 CVE-2023-33167 · GHSA-r72j-wvhj-623m

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 36

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-126

TI-2023-16343 CVE-2023-33166 · GHSA-fgg8-m57m-85xf

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 36

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-126

TI-2023-16332 CVE-2023-33155 · GHSA-9v8q-j89p-6x8w

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

LOW 36

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00359 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +4 CWE-284

TI-2023-15358 CVE-2023-32054 · GHSA-792f-5x2v-grw4

Volume Shadow Copy Elevation of Privilege Vulnerability

LOW 36

Volume Shadow Copy Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00914 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +8 CWE-36

TI-2023-15347 CVE-2023-32042 · GHSA-2m4m-q2r2-j2j5

OLE Automation Information Disclosure Vulnerability

LOW 36

OLE Automation Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01342 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-908

TI-2023-15341 CVE-2023-32035 · GHSA-vrjj-c4c5-8q9x

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 36

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-15340 CVE-2023-32034 · GHSA-j2xm-9hq6-xxrp

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 36

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-08138 CVE-2023-21756 · GHSA-r586-f2rp-fgr6

Windows Win32k Elevation of Privilege Vulnerability

LOW 36

Windows Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00428 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +8 CWE-416

TI-2023-17682 CVE-2023-35343 · GHSA-gqj6-cx3q-4fgj

Windows Geolocation Service Remote Code Execution Vulnerability

LOW 35

Windows Geolocation Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00671 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +4 CWE-426

TI-2023-16340 CVE-2023-33163 · GHSA-h5jj-9q44-xpqv

Windows Network Load Balancing Remote Code Execution Vulnerability

LOW 35

Windows Network Load Balancing Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00384 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +4 CWE-591

TI-2023-15339 CVE-2023-32033 · GHSA-jp98-p5wv-pj25

Microsoft Failover Cluster Remote Code Execution Vulnerability

LOW 35

Microsoft Failover Cluster Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00937 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-416

TI-2023-07926 CVE-2023-21526 · GHSA-7pjm-g8hr-8rg2

Windows Netlogon Information Disclosure Vulnerability

LOW 35

Windows Netlogon Information Disclosure Vulnerability

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01125 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10

TI-2023-17699 CVE-2023-35361 · GHSA-f939-78jq-9qmf

Windows Kernel Elevation of Privilege Vulnerability

LOW 33

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00299 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +8 CWE-362

TI-2023-17698 CVE-2023-35360 · GHSA-vxw7-fgjg-5729

Windows Kernel Elevation of Privilege Vulnerability

LOW 33

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00299 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +8 CWE-591

TI-2023-17672 CVE-2023-35332 · GHSA-g2v9-hqc4-rfwv

Windows Remote Desktop Protocol Security Feature Bypass

LOW 33

Windows Remote Desktop Protocol Security Feature Bypass

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00502 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +9 CWE-326

TI-2023-15348 CVE-2023-32043 · GHSA-xrrv-33fc-mq2w

Windows Remote Desktop Security Feature Bypass Vulnerability

LOW 33

Windows Remote Desktop Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00508 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-327

TI-2023-17690 CVE-2023-35351 · GHSA-m6w2-chv8-mqrq

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

LOW 32

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00698 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-416

TI-2023-17686 CVE-2023-35347 · GHSA-j24r-mmgr-vx89

Microsoft Install Service Elevation of Privilege Vulnerability

LOW 32

Microsoft Install Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.005 Published 2023-07-11 Fixed in 10.0.20348.1850, 10.0.22000.2176 +3 CWE-59

TI-2023-17685 CVE-2023-35346 · GHSA-63hm-fq62-wc3p

Windows DNS Server Remote Code Execution Vulnerability

LOW 32

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00698 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-591

TI-2023-17684 CVE-2023-35345 · GHSA-5vvx-qpjq-rghx

Windows DNS Server Remote Code Execution Vulnerability

LOW 32

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00698 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-591

TI-2023-17683 CVE-2023-35344 · GHSA-92g4-xrf5-h8q5

Windows DNS Server Remote Code Execution Vulnerability

LOW 32

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00698 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-591

TI-2023-17669 CVE-2023-35329 · GHSA-gq89-frjw-2xjj

Windows Authentication Denial of Service Vulnerability

LOW 32

Windows Authentication Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01823 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +8 CWE-400

TI-2023-17662 CVE-2023-35321 · GHSA-fpv8-w764-c49r

Windows Deployment Services Denial of Service Vulnerability

LOW 32

Windows Deployment Services Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01557 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-170

TI-2023-17660 CVE-2023-35319 · GHSA-343m-w9r4-x3c4

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 32

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0163 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-17659 CVE-2023-35318 · GHSA-6vfv-jcwm-5q6m

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 32

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0163 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-17657 CVE-2023-35316 · GHSA-8225-98gw-gjwg

Remote Procedure Call Runtime Information Disclosure Vulnerability

LOW 32

Remote Procedure Call Runtime Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01404 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-17655 CVE-2023-35314 · GHSA-963c-6f32-46f5

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 32

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0163 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-17651 CVE-2023-35310 · GHSA-4v3v-mrjj-3599

Windows DNS Server Remote Code Execution Vulnerability

LOW 32

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00658 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-591

TI-2023-17639 CVE-2023-35296 · GHSA-9r4x-92xq-pp4p

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

LOW 32

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01527 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +8 CWE-125

TI-2023-16341 CVE-2023-33164 · GHSA-7hrj-g29v-92x3

Remote Procedure Call Runtime Denial of Service Vulnerability

LOW 32

Remote Procedure Call Runtime Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0163 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-125

TI-2023-15387 CVE-2023-32083 · GHSA-wrhh-c5hh-rcgx

Microsoft Failover Cluster Information Disclosure Vulnerability

LOW 32

Microsoft Failover Cluster Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0159 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +1 CWE-122

TI-2023-15359 CVE-2023-32055 · GHSA-gw4f-q547-r9mg

Active Template Library Elevation of Privilege Vulnerability

LOW 32

Active Template Library Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0036 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-416

TI-2023-18659 CVE-2023-36871 · GHSA-8qqx-5mjv-gv65

Azure Active Directory Security Feature Bypass Vulnerability

LOW 31

Azure Active Directory Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01168 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +6

TI-2023-17687 CVE-2023-35348 · GHSA-2797-x8w7-6c4p

Active Directory Federation Service Security Feature Bypass Vulnerability

LOW 31

Active Directory Federation Service Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01034 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +1 CWE-522

TI-2023-17671 CVE-2023-35331 · GHSA-xc56-98rm-xc98

Windows Local Security Authority (LSA) Denial of Service Vulnerability

LOW 30

Windows Local Security Authority (LSA) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0072 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +3

TI-2023-15342 CVE-2023-32037 · GHSA-j68p-v78v-2jh4

Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability

LOW 30

Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00655 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +4 CWE-20

TI-2023-17680 CVE-2023-35341 · GHSA-mg67-853h-3538

Microsoft DirectMusic Information Disclosure Vulnerability

LOW 28

Microsoft DirectMusic Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00504 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +9 CWE-190

TI-2023-16351 CVE-2023-33174 · GHSA-f836-ch4g-q4pw

Windows Cryptographic Information Disclosure Vulnerability

LOW 26

Windows Cryptographic Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00683 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +10 CWE-200

TI-2023-15346 CVE-2023-32041 · GHSA-4534-j3wr-8f9q

Windows Update Orchestrator Service Information Disclosure Vulnerability

LOW 26

Windows Update Orchestrator Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00644 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +5 CWE-908

TI-2023-17667 CVE-2023-35326 · GHSA-2f7x-w8fx-599g

Windows CDP User Components Information Disclosure Vulnerability

LOW 25

Windows CDP User Components Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0052 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +4 CWE-908

TI-2023-17665 CVE-2023-35324 · GHSA-j3pm-5jx8-x57v

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

LOW 25

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0052 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +8 CWE-126

TI-2023-17648 CVE-2023-35306 · GHSA-4m4c-4xm3-gfp6

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

LOW 25

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0052 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +8 CWE-20

TI-2023-15389 CVE-2023-32085 · GHSA-jf64-4prw-vqc5

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

LOW 25

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0052 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +8 CWE-126

TI-2023-15345 CVE-2023-32040 · GHSA-vfgg-rxvj-hmjm

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

LOW 25

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0052 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +8 CWE-822

TI-2023-15344 CVE-2023-32039 · GHSA-3mjf-7c4r-qw77

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

LOW 25

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0052 Published 2023-07-11 Fixed in 10.0.17763.4645, 10.0.20348.1850 +8 CWE-125