Microsoft update

KB5032304

SecurityHotpatchUpdate

View on Microsoft →

Fixed in

Windows Server 2022 10.0.20348.2091
Windows Server 2022 (Server Core installation) 10.0.20348.2091

Fixes 29 records

TI-2023-18080 CVE-2023-36025 · GHSA-4jff-227j-6g3v

Windows SmartScreen Security Feature Bypass Vulnerability

CRITICAL 97KEV

Windows SmartScreen Security Feature Bypass Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.88196 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12

TI-2023-18284 CVE-2023-36424 · GHSA-5wf7-vwpm-xxwx

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.12087 Published 2023-11-14 Fixed in 10.0.22631.2715, 10.0.25398.531 +12 CWE-125

TI-2023-18090 CVE-2023-36036 · GHSA-pmq2-r54m-hmf6

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.1667 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-122

TI-2023-18087 CVE-2023-36033 · GHSA-px3r-p5ph-hg48

Windows DWM Core Library Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows DWM Core Library Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.10945 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +6 CWE-822

TI-2023-18260 CVE-2023-36397 · GHSA-fvxr-6v23-vmqv

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

HIGH 66

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1751 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-126

TI-2023-18073 CVE-2023-36017 · GHSA-mcqq-mjfq-3x9p

Windows Scripting Engine Memory Corruption Vulnerability

MEDIUM 61

Windows Scripting Engine Memory Corruption Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.25289 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +11 CWE-843

TI-2023-18083 CVE-2023-36028 · GHSA-c4hh-p8jf-m389

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

MEDIUM 54

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02836 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +8 CWE-122

TI-2023-18263 CVE-2023-36400 · GHSA-m23j-24cg-vhc8

Windows HMAC Key Derivation Elevation of Privilege Vulnerability

MEDIUM 47

Windows HMAC Key Derivation Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.04258 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +8 CWE-122

TI-2023-18283 CVE-2023-36423 · GHSA-c2q9-6g49-ppcf

Microsoft Remote Registry Service Remote Code Execution Vulnerability

MEDIUM 44

Microsoft Remote Registry Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0199 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-122

TI-2023-18265 CVE-2023-36402 · GHSA-hph9-wr3c-x97w

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 44

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01785 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-122

TI-2023-18262 CVE-2023-36399 · GHSA-4q8c-66pm-rmjp

Windows Storage Elevation of Privilege Vulnerability

MEDIUM 44

Windows Storage Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.08341 Published 2023-11-14 Fixed in 10.0.25398.531, 10.0.20348.2113 +3 CWE-59

TI-2023-18255 CVE-2023-36392 · GHSA-4rg7-8mp3-c7wh

DHCP Server Service Denial of Service Vulnerability

MEDIUM 44

DHCP Server Service Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02458 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +4 CWE-126

TI-2023-18257 CVE-2023-36394 · GHSA-rcvq-7v23-7hh8

Windows Search Service Elevation of Privilege Vulnerability

MEDIUM 42

Windows Search Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.06723 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +5 CWE-59

TI-2023-18285 CVE-2023-36425 · GHSA-cjrw-wqcm-hrgm

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

MEDIUM 40

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.01485 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-122

TI-2023-18270 CVE-2023-36407 · GHSA-j6p3-4997-wc62

Windows Hyper-V Elevation of Privilege Vulnerability

LOW 38

Windows Hyper-V Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0173 Published 2023-11-14 Fixed in 10.0.20348.2113, 10.0.22000.2600 +3 CWE-20

TI-2023-18258 CVE-2023-36395 · GHSA-wffc-2qfw-2qfw

Windows Deployment Services Denial of Service Vulnerability

LOW 38

Windows Deployment Services Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02458 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +6 CWE-190

TI-2023-18256 CVE-2023-36393 · GHSA-93q2-9p4x-289c

Windows User Interface Application Core Remote Code Execution Vulnerability

LOW 38

Windows User Interface Application Core Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00994 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-426

TI-2023-18099 CVE-2023-36047 · GHSA-hg2h-ghj3-h2p4

Windows Authentication Elevation of Privilege Vulnerability

LOW 38

Windows Authentication Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01107 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +6 CWE-59

TI-2023-18271 CVE-2023-36408 · GHSA-w27x-pgpr-94mx

Windows Hyper-V Elevation of Privilege Vulnerability

LOW 37

Windows Hyper-V Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0061 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +7 CWE-122

TI-2023-18264 CVE-2023-36401 · GHSA-fq85-f77r-7g65

Microsoft Remote Registry Service Remote Code Execution Vulnerability

LOW 37

Microsoft Remote Registry Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01938 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-190

TI-2023-18528 CVE-2023-36719 · GHSA-xgj8-66rv-68vp

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

LOW 35

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0061 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-20

TI-2023-18518 CVE-2023-36705 · GHSA-v4cw-g9r2-xrx2

Windows Installer Elevation of Privilege Vulnerability

LOW 35

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00677 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-59

TI-2023-18286 CVE-2023-36427 · GHSA-jxwh-w46f-545j

Windows Hyper-V Elevation of Privilege Vulnerability

LOW 34

Windows Hyper-V Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.01492 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +6

TI-2023-18268 CVE-2023-36405 · GHSA-5wr2-pxjw-4gw9

Windows Kernel Elevation of Privilege Vulnerability

LOW 33

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00363 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +7 CWE-362

TI-2023-18266 CVE-2023-36403 · GHSA-5qfq-28xq-59vr

Windows Kernel Elevation of Privilege Vulnerability

LOW 32

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00532 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-591

TI-2023-18261 CVE-2023-36398 · GHSA-5mf2-6q82-4wf6

Windows NTFS Information Disclosure Vulnerability

LOW 30

Windows NTFS Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00755 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +10 CWE-908

TI-2023-18287 CVE-2023-36428 · GHSA-3vg4-xh27-p2mx

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

LOW 26

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00754 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +12 CWE-125

TI-2023-18269 CVE-2023-36406 · GHSA-fh5c-3jxg-8hgw

Windows Hyper-V Information Disclosure Vulnerability

LOW 26

Windows Hyper-V Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00754 Published 2023-11-14 Fixed in 10.0.20348.2113, 10.0.22000.2600 +3 CWE-20

TI-2023-18267 CVE-2023-36404 · GHSA-mv5m-hv8v-8wh5

Windows Kernel Information Disclosure Vulnerability

LOW 26

Windows Kernel Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00761 Published 2023-11-14 Fixed in 10.0.17763.5122, 10.0.20348.2113 +7 CWE-284