Microsoft update

KB5032199

Security Update

View on Microsoft →

Fixed in

Microsoft .NET Framework 3.5 AND 4.6/4.6.2 10.0.10240.20308
Microsoft Defender for Endpoint for Windows 10.0.10240.20308
Windows 10 for 32-bit Systems 10.0.10240.20308
Windows 10 for x64-based Systems 10.0.10240.20308

Fixes 21 records

TI-2023-18080 CVE-2023-36025 · GHSA-4jff-227j-6g3v

Windows SmartScreen Security Feature Bypass Vulnerability

CRITICAL 97KEV

Windows SmartScreen Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.88196 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12

TI-2023-18284 CVE-2023-36424 · GHSA-5wf7-vwpm-xxwx

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.12087 Published 2023-11-14 Fixed in 10.0.22631.2715, 10.0.25398.531 +12 CWE-125

TI-2023-18090 CVE-2023-36036 · GHSA-pmq2-r54m-hmf6

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.1667 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-122

TI-2023-18260 CVE-2023-36397 · GHSA-fvxr-6v23-vmqv

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

HIGH 66

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1751 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-126

TI-2023-18073 CVE-2023-36017 · GHSA-mcqq-mjfq-3x9p

Windows Scripting Engine Memory Corruption Vulnerability

MEDIUM 61

Windows Scripting Engine Memory Corruption Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.25289 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +11 CWE-843

TI-2023-18100 CVE-2023-36049 · GHSA-c3hf-8vgx-72rh

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

MEDIUM 58

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0679 Published 2023-11-14 Fixed in 17.2.22, 17.4.14 +11 CWE-20

TI-2023-18083 CVE-2023-36028 · GHSA-c4hh-p8jf-m389

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

MEDIUM 54

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02836 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +8 CWE-122

TI-2023-18263 CVE-2023-36400 · GHSA-m23j-24cg-vhc8

Windows HMAC Key Derivation Elevation of Privilege Vulnerability

MEDIUM 47

Windows HMAC Key Derivation Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.04258 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +8 CWE-122

TI-2023-18394 CVE-2023-36560 · GHSA-mw75-g77c-6rh4

ASP.NET Security Feature Bypass Vulnerability

MEDIUM 45

ASP.NET Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02913 Published 2023-11-14 Fixed in 4.8.9206.0, 4.8.4682.0 +4

TI-2023-18283 CVE-2023-36423 · GHSA-c2q9-6g49-ppcf

Microsoft Remote Registry Service Remote Code Execution Vulnerability

MEDIUM 44

Microsoft Remote Registry Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0199 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-122

TI-2023-18265 CVE-2023-36402 · GHSA-hph9-wr3c-x97w

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01785 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-122

TI-2023-18257 CVE-2023-36394 · GHSA-rcvq-7v23-7hh8

Windows Search Service Elevation of Privilege Vulnerability

MEDIUM 42

Windows Search Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.06723 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +5 CWE-59

TI-2023-18285 CVE-2023-36425 · GHSA-cjrw-wqcm-hrgm

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

MEDIUM 40

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.01485 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-122

TI-2023-18256 CVE-2023-36393 · GHSA-93q2-9p4x-289c

Windows User Interface Application Core Remote Code Execution Vulnerability

LOW 38

Windows User Interface Application Core Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00994 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-426

TI-2024-14076 CVE-2024-21315 · GHSA-j7vw-8r54-mfcg

Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability

LOW 37

Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00639 Published 2024-02-13 Fixed in 10.0.17763.5122 CWE-20

TI-2023-18264 CVE-2023-36401 · GHSA-fq85-f77r-7g65

Microsoft Remote Registry Service Remote Code Execution Vulnerability

LOW 37

Microsoft Remote Registry Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01938 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-190

TI-2023-18528 CVE-2023-36719 · GHSA-xgj8-66rv-68vp

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

LOW 35

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0061 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-20

TI-2023-18518 CVE-2023-36705 · GHSA-v4cw-g9r2-xrx2

Windows Installer Elevation of Privilege Vulnerability

LOW 35

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00677 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-59

TI-2023-18266 CVE-2023-36403 · GHSA-5qfq-28xq-59vr

Windows Kernel Elevation of Privilege Vulnerability

LOW 32

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00532 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-591

TI-2023-18261 CVE-2023-36398 · GHSA-5mf2-6q82-4wf6

Windows NTFS Information Disclosure Vulnerability

LOW 30

Windows NTFS Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00755 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +10 CWE-908

TI-2023-18287 CVE-2023-36428 · GHSA-3vg4-xh27-p2mx

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

LOW 26

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00754 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-125