Microsoft update

KB5033375

Security Update

View on Microsoft →

Fixed in

Windows 11 Version 22H2 for ARM64-based Systems 10.0.22621.2861
Windows 11 Version 22H2 for x64-based Systems 10.0.22621.2861
Windows 11 Version 23H2 for ARM64-based Systems 10.0.22621.2861
Windows 11 Version 23H2 for x64-based Systems 10.0.22631.2861

Fixes 17 records

TI-2023-17736 CVE-2023-35628 · GHSA-rx7r-r3h4-3r66

Windows MSHTML Platform Remote Code Execution Vulnerability

HIGH 81

Windows MSHTML Platform Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.92817 Published 2023-12-12 Fixed in 10.0.22631.2861, 10.0.22621.2861 +11 CWE-416

TI-2023-18062 CVE-2023-36005 · GHSA-33hq-6mqq-8gjp

Windows Telephony Server Elevation of Privilege Vulnerability

MEDIUM 56

Windows Telephony Server Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.23857 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-591

TI-2023-17750 CVE-2023-35644 · GHSA-76pp-5phh-864m

Windows Sysmain Service Elevation of Privilege Vulnerability

MEDIUM 51

Windows Sysmain Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0625 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +6 CWE-190

TI-2023-17747 CVE-2023-35641 · GHSA-4x9j-67cf-fqh5

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

MEDIUM 48

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0722 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-682

TI-2023-17738 CVE-2023-35630 · GHSA-q4pm-gf4h-gpx9

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

MEDIUM 47

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.06127 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-122

TI-2023-17746 CVE-2023-35639 · GHSA-332f-h579-gp2q

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 45

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02368 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-122

TI-2023-18254 CVE-2023-36391 · GHSA-q28x-8jvc-pp88

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

MEDIUM 44

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0724 Published 2023-12-12 Fixed in 10.0.22621.2861, 10.0.22631.2861 CWE-59

TI-2023-17739 CVE-2023-35631 · GHSA-r9vv-6834-c7fq

Win32k Elevation of Privilege Vulnerability

MEDIUM 43

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.06548 Published 2023-12-12 Fixed in 10.0.22000.2652, 10.0.22621.2861 +2

TI-2023-18063 CVE-2023-36006 · GHSA-97rh-rq6v-7pc4

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 42

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01891 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-121

TI-2023-17742 CVE-2023-35634 · GHSA-wrjx-7qm9-3xx6

Windows Bluetooth Driver Remote Code Execution Vulnerability

MEDIUM 40

Windows Bluetooth Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00954 Published 2023-12-12 Fixed in 10.0.22000.2652, 10.0.22621.2861 +1 CWE-121

TI-2023-18068 CVE-2023-36011 · GHSA-4c5r-c622-8873

Win32k Elevation of Privilege Vulnerability

LOW 37

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00705 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +10 CWE-822

TI-2023-18060 CVE-2023-36003 · GHSA-79rg-fmv7-2cjf

XAML Diagnostics Elevation of Privilege Vulnerability

LOW 37

XAML Diagnostics Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.02846 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +8 CWE-426

TI-2023-18511 CVE-2023-36696 · GHSA-2xr3-fxm9-q75h

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

LOW 36

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00864 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +6 CWE-125

TI-2023-18061 CVE-2023-36004 · GHSA-8qjv-8x85-xvqv

Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

LOW 36

Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01369 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-287

TI-2023-08122 CVE-2023-21740 · GHSA-7gx6-g552-8q57

Windows Media Remote Code Execution Vulnerability

LOW 36

Windows Media Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01085 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +11 CWE-122

TI-2023-17748 CVE-2023-35642 · GHSA-pmg7-23ph-4pf9

Internet Connection Sharing (ICS) Denial of Service Vulnerability

LOW 31

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01282 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-682

TI-2023-17743 CVE-2023-35635 · GHSA-f3h6-jfcw-v9xq

Windows Kernel Denial of Service Vulnerability

LOW 27

Windows Kernel Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00996 Published 2023-12-12 Fixed in 10.0.22621.2861, 10.0.22631.2861 CWE-125