Microsoft update

KB5031377

Security Update

View on Microsoft →

Fixed in

Windows 10 for 32-bit Systems 10.0.10240.20232
Windows 10 for x64-based Systems 10.0.10240.20232

Fixes 62 records

TI-2023-18397 CVE-2023-36563 · GHSA-gp6r-cxxr-fc5f

Microsoft WordPad Information Disclosure Vulnerability

CRITICAL 88KEV

Microsoft WordPad Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.20318 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-20

TI-2023-18417 CVE-2023-36584 · GHSA-frhq-jq5j-7w9c

Windows Mark of the Web Security Feature Bypass Vulnerability

HIGH 84KEV

Windows Mark of the Web Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.03251 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10

TI-2023-18430 CVE-2023-36606 · GHSA-wh38-jq3r-39hr

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

HIGH 76

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.69361 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-400

TI-2023-17688 CVE-2023-35349 · GHSA-3qv5-8wgg-g4c6

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

MEDIUM 54

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02886 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-20

TI-2023-18291 CVE-2023-36434 · GHSA-jgcx-mx3w-x54f

Windows IIS Server Elevation of Privilege Vulnerability

MEDIUM 46

Windows IIS Server Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02274 Published 2023-10-10 Fixed in 10.0.19045.3570, 10.0.22621.2428 +10 CWE-307

TI-2023-18424 CVE-2023-36594 · GHSA-h4pg-m697-86cr

Windows Graphics Component Elevation of Privilege Vulnerability

MEDIUM 45

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.08001 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-843

TI-2023-18540 CVE-2023-36731 · GHSA-6p3p-8mc6-973v

Win32k Elevation of Privilege Vulnerability

MEDIUM 44

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.06622 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-20

TI-2023-18521 CVE-2023-36709 · GHSA-j4cf-7mc7-2299

Microsoft AllJoyn API Denial of Service Vulnerability

MEDIUM 44

Microsoft AllJoyn API Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02678 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +6 CWE-476

TI-2023-18427 CVE-2023-36602 · GHSA-fvv9-2jpm-h3rr

Windows TCP/IP Denial of Service Vulnerability

MEDIUM 44

Windows TCP/IP Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02482 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-476

TI-2023-18414 CVE-2023-36581 · GHSA-244w-39h6-2f5r

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 44

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02483 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-126

TI-2023-18413 CVE-2023-36579 · GHSA-wh6f-p9hp-fpwj

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 44

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02483 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-400

TI-2023-18411 CVE-2023-36577 · GHSA-5j29-6cpw-mcc3

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01773 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-122

TI-2023-18289 CVE-2023-36431 · GHSA-4gqw-x6ww-pxrr

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

MEDIUM 44

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02483 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-400

TI-2023-18425 CVE-2023-36596 · GHSA-54fp-2g66-5c89

Remote Procedure Call Information Disclosure Vulnerability

MEDIUM 43

Remote Procedure Call Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02113 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +8 CWE-822

TI-2023-18401 CVE-2023-36567 · GHSA-q586-vvpv-cj23

Windows Deployment Services Information Disclosure Vulnerability

MEDIUM 43

Windows Deployment Services Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02081 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-908

TI-2023-18295 CVE-2023-36438 · GHSA-5m5h-6gvp-jr2f

Windows TCP/IP Information Disclosure Vulnerability

MEDIUM 43

Windows TCP/IP Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02027 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10

TI-2023-18512 CVE-2023-36697 · GHSA-j4jr-x49m-p2hp

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

MEDIUM 41

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.02197 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-20

TI-2023-22179 CVE-2023-41774 · GHSA-9hq3-7chc-xff2

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01306 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-22178 CVE-2023-41773 · GHSA-x5g4-5r6g-2v75

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01306 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-22176 CVE-2023-41771 · GHSA-fcwr-mx87-mcf2

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01302 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-22175 CVE-2023-41770 · GHSA-6jcp-96px-ch37

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01302 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-22174 CVE-2023-41769 · GHSA-r928-44jm-2rqp

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01302 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-22173 CVE-2023-41768 · GHSA-v8r4-r5f4-jp7j

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01302 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-22172 CVE-2023-41767 · GHSA-mmjf-wxcw-v9fp

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01302 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-22170 CVE-2023-41765 · GHSA-fr45-3pq8-cqp4

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01302 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-19584 CVE-2023-38166 · GHSA-3g9v-h3h6-7qf4

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 40

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01302 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-18549 CVE-2023-36743 · GHSA-5845-35rx-r9pr

Win32k Elevation of Privilege Vulnerability

MEDIUM 40

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03633 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-18527 CVE-2023-36718 · GHSA-rcw5-8jm2-j9f9

Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability

LOW 39

Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01327 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +6 CWE-94

TI-2023-19578 CVE-2023-38159 · GHSA-3mc9-3c2c-xqg4

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 38

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.04056 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +6 CWE-591

TI-2023-18522 CVE-2023-36710 · GHSA-5688-p8vm-h8r5

Windows Media Foundation Core Remote Code Execution Vulnerability

LOW 38

Windows Media Foundation Core Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00927 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +9 CWE-197

TI-2023-18515 CVE-2023-36702 · GHSA-m5gc-mv42-7hx5

Microsoft DirectMusic Remote Code Execution Vulnerability

LOW 38

Microsoft DirectMusic Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00805 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +9 CWE-94

TI-2023-18426 CVE-2023-36598 · GHSA-m3wv-72v2-v6f6

Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability

LOW 38

Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-122

TI-2023-18423 CVE-2023-36593 · GHSA-59c6-46qg-fj99

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 38

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00822 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-190

TI-2023-18418 CVE-2023-36585 · GHSA-9h72-46q7-mr26

Windows upnphost.dll Denial of Service Vulnerability

LOW 38

Windows upnphost.dll Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02604 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-20

TI-2023-18293 CVE-2023-36436 · GHSA-8m65-6gr7-mrvf

Windows MSHTML Platform Remote Code Execution Vulnerability

LOW 38

Windows MSHTML Platform Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00849 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +9

TI-2023-18514 CVE-2023-36701 · GHSA-5q66-9mc9-28r5

Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability

LOW 37

Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00576 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +8 CWE-125

TI-2023-18391 CVE-2023-36557 · GHSA-8h98-mv3j-75c6

PrintHTML API Remote Code Execution Vulnerability

LOW 37

PrintHTML API Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00801 Published 2023-10-10 Fixed in 10.0.22621.2428, 10.0.19045.3570 +6

TI-2023-22171 CVE-2023-41766 · GHSA-7f38-v98x-v25m

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

LOW 36

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00819 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-426

TI-2023-18524 CVE-2023-36712 · GHSA-45q3-4wmv-wpgr

Windows Kernel Elevation of Privilege Vulnerability

LOW 36

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10

TI-2023-18422 CVE-2023-36592 · GHSA-9579-5vrc-wr3m

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18421 CVE-2023-36591 · GHSA-p86f-33vj-vqm9

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18420 CVE-2023-36590 · GHSA-wmhg-q3mp-9mvw

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00822 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10

TI-2023-18419 CVE-2023-36589 · GHSA-5j99-chp6-p2gh

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18416 CVE-2023-36583 · GHSA-vf8m-p3wg-hqwv

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00822 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-18415 CVE-2023-36582 · GHSA-gr28-6h8g-ggvq

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00822 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-190

TI-2023-18412 CVE-2023-36578 · GHSA-vrfh-cg8j-whm2

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00822 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-843

TI-2023-18409 CVE-2023-36575 · GHSA-v4f6-358x-v44f

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18408 CVE-2023-36574 · GHSA-r5j7-pwg5-35p9

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18407 CVE-2023-36573 · GHSA-cq5q-99pr-fc9j

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18406 CVE-2023-36572 · GHSA-jqvh-93qp-x9fh

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18405 CVE-2023-36571 · GHSA-fcr8-rj58-cvpj

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18404 CVE-2023-36570 · GHSA-8xp7-rf4h-mfmg

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

LOW 36

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00814 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-94

TI-2023-18579 CVE-2023-36776 · GHSA-7pcq-mhvw-4mgv

Win32k Elevation of Privilege Vulnerability

LOW 35

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.02051 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-18541 CVE-2023-36732 · GHSA-2c6h-xvj7-f2xc

Win32k Elevation of Privilege Vulnerability

LOW 35

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00634 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10

TI-2023-18538 CVE-2023-36729 · GHSA-393w-2929-cxcg

Named Pipe File System Elevation of Privilege Vulnerability

LOW 35

Named Pipe File System Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00576 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +7 CWE-121

TI-2023-18535 CVE-2023-36726 · GHSA-2wmp-7qf6-49px

Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability

LOW 35

Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00576 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-416

TI-2023-18525 CVE-2023-36713 · GHSA-4vrv-8x2h-44vh

Windows Common Log File System Driver Information Disclosure Vulnerability

LOW 35

Windows Common Log File System Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.07332 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-908

TI-2023-18523 CVE-2023-36711 · GHSA-7w34-g63q-q826

Windows Runtime C++ Template Library Elevation of Privilege Vulnerability

LOW 35

Windows Runtime C++ Template Library Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00625 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +8 CWE-59

TI-2023-18398 CVE-2023-36564 · GHSA-fpvf-qrrj-g7c6

Windows Search Security Feature Bypass Vulnerability

LOW 32

Windows Search Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01432 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10

TI-2023-18526 CVE-2023-36717 · GHSA-xm74-xg8p-3q48

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

LOW 30

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00702 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +6

TI-2023-18533 CVE-2023-36724 · GHSA-79p6-hc5c-r998

Windows Power Management Service Information Disclosure Vulnerability

LOW 26

Windows Power Management Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00537 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +9 CWE-287

TI-2023-18531 CVE-2023-36722 · GHSA-jq3c-jwqq-c2qg

Active Directory Domain Services Information Disclosure Vulnerability

LOW 23

Active Directory Domain Services Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.01373 Published 2023-10-10 Fixed in 10.0.17763.4974, 10.0.20348.2031 +10 CWE-284