Microsoft update

KB5032875

Security Update

Fixed in

TI-2023-19588 CVE-2023-38171 · GHSA-xh5m-8qqp-c5x7

HIGH 76

Microsoft QUIC Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.71046 Published 2023-10-10 Fixed in 17.2.21, 17.4.13 +8 CWE-476

TI-2023-18292 CVE-2023-36435 · GHSA-fr44-546p-7xcp

MEDIUM 47

Microsoft QUIC Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05718 Published 2023-10-10 Fixed in 7.3.9, 10.0.20348.2031 +4 CWE-400

TI-2023-18592 CVE-2023-36796 · GHSA-h7jm-g87p-5935

LOW 39

Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01225 Published 2023-09-12 Fixed in 17.6.9, 17.7.6 +19 CWE-191

TI-2023-18591 CVE-2023-36794 · GHSA-38fq-h5hc-gwv8

LOW 39

Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01225 Published 2023-09-12 Fixed in 15.9.57, 17.2.21 +15 CWE-191

TI-2023-18590 CVE-2023-36793 · GHSA-g4p8-g7mq-wpx4

LOW 39

Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01225 Published 2023-09-12 Fixed in 15.9.57, 17.2.21 +17 CWE-122

TI-2023-18589 CVE-2023-36792 · GHSA-3qf9-qxfj-4whc

LOW 39

Visual Studio Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01225 Published 2023-09-12 Fixed in 15.9.57, 17.2.21 +16 CWE-190

TI-2023-18593 CVE-2023-36799 · GHSA-h3hv-63q5-jgpr

LOW 36

.NET Core and Visual Studio Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.04637 Published 2023-09-12 Fixed in 6.0.24, 7.0.13 +6 CWE-400