Microsoft update

KB5032249

Monthly Rollup

View on Microsoft →

Fixed in

Windows Server 2012 R2 6.3.9600.21668
Windows Server 2012 R2 (Server Core installation) 6.3.9600.21668

Fixes 17 records

TI-2023-18080 CVE-2023-36025 · GHSA-4jff-227j-6g3v

Windows SmartScreen Security Feature Bypass Vulnerability

CRITICAL 97KEV

Windows SmartScreen Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.88196 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12

TI-2023-18284 CVE-2023-36424 · GHSA-5wf7-vwpm-xxwx

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.12087 Published 2023-11-14 Fixed in 10.0.22631.2715, 10.0.25398.531 +12 CWE-125

TI-2023-18090 CVE-2023-36036 · GHSA-pmq2-r54m-hmf6

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.1667 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-122

TI-2023-18260 CVE-2023-36397 · GHSA-fvxr-6v23-vmqv

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

HIGH 66

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1751 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-126

TI-2023-18073 CVE-2023-36017 · GHSA-mcqq-mjfq-3x9p

Windows Scripting Engine Memory Corruption Vulnerability

MEDIUM 61

Windows Scripting Engine Memory Corruption Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.25289 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +11 CWE-843

TI-2023-18283 CVE-2023-36423 · GHSA-c2q9-6g49-ppcf

Microsoft Remote Registry Service Remote Code Execution Vulnerability

MEDIUM 44

Microsoft Remote Registry Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0199 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-122

TI-2023-18265 CVE-2023-36402 · GHSA-hph9-wr3c-x97w

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01785 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-122

TI-2023-18255 CVE-2023-36392 · GHSA-4rg7-8mp3-c7wh

DHCP Server Service Denial of Service Vulnerability

MEDIUM 44

DHCP Server Service Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02458 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +4 CWE-126

TI-2023-18285 CVE-2023-36425 · GHSA-cjrw-wqcm-hrgm

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

MEDIUM 40

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.01485 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-122

TI-2023-18258 CVE-2023-36395 · GHSA-wffc-2qfw-2qfw

Windows Deployment Services Denial of Service Vulnerability

LOW 38

Windows Deployment Services Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02458 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +6 CWE-190

TI-2023-18256 CVE-2023-36393 · GHSA-93q2-9p4x-289c

Windows User Interface Application Core Remote Code Execution Vulnerability

LOW 38

Windows User Interface Application Core Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00994 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-426

TI-2023-18264 CVE-2023-36401 · GHSA-fq85-f77r-7g65

Microsoft Remote Registry Service Remote Code Execution Vulnerability

LOW 37

Microsoft Remote Registry Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01938 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-190

TI-2023-18528 CVE-2023-36719 · GHSA-xgj8-66rv-68vp

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

LOW 35

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0061 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-20

TI-2023-18518 CVE-2023-36705 · GHSA-v4cw-g9r2-xrx2

Windows Installer Elevation of Privilege Vulnerability

LOW 35

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00677 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-59

TI-2023-18266 CVE-2023-36403 · GHSA-5qfq-28xq-59vr

Windows Kernel Elevation of Privilege Vulnerability

LOW 32

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00532 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-591

TI-2023-18261 CVE-2023-36398 · GHSA-5mf2-6q82-4wf6

Windows NTFS Information Disclosure Vulnerability

LOW 30

Windows NTFS Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00755 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +10 CWE-908

TI-2023-18287 CVE-2023-36428 · GHSA-3vg4-xh27-p2mx

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

LOW 26

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00754 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-125