Microsoft update

KB5033379

Security Update

View on Microsoft →

Fixed in

Windows 10 for 32-bit Systems 10.0.10240.20345
Windows 10 for x64-based Systems 10.0.10240.20345

Fixes 14 records

TI-2023-17736 CVE-2023-35628 · GHSA-rx7r-r3h4-3r66

Windows MSHTML Platform Remote Code Execution Vulnerability

HIGH 81

Windows MSHTML Platform Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.92817 Published 2023-12-12 Fixed in 10.0.22631.2861, 10.0.22621.2861 +11 CWE-416

TI-2023-18062 CVE-2023-36005 · GHSA-33hq-6mqq-8gjp

Windows Telephony Server Elevation of Privilege Vulnerability

MEDIUM 56

Windows Telephony Server Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.23857 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-591

TI-2023-17747 CVE-2023-35641 · GHSA-4x9j-67cf-fqh5

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

MEDIUM 48

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.0722 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-682

TI-2023-17738 CVE-2023-35630 · GHSA-q4pm-gf4h-gpx9

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

MEDIUM 47

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.06127 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-122

TI-2023-17746 CVE-2023-35639 · GHSA-332f-h579-gp2q

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 45

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02368 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-122

TI-2023-17741 CVE-2023-35633 · GHSA-2xc6-pfrf-w5p4

Windows Kernel Elevation of Privilege Vulnerability

MEDIUM 45

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.08698 Published 2023-12-12 Fixed in 10.0.10240.20345, 6.0.6003.22413 +3 CWE-59

TI-2023-17740 CVE-2023-35632 · GHSA-2ppf-7c48-6cc8

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

MEDIUM 43

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.06541 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.19044.3803 +6 CWE-190

TI-2023-18063 CVE-2023-36006 · GHSA-97rh-rq6v-7pc4

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 42

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01891 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-121

TI-2023-18068 CVE-2023-36011 · GHSA-4c5r-c622-8873

Win32k Elevation of Privilege Vulnerability

LOW 37

Win32k Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00705 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +10 CWE-822

TI-2023-18060 CVE-2023-36003 · GHSA-79rg-fmv7-2cjf

XAML Diagnostics Elevation of Privilege Vulnerability

LOW 37

XAML Diagnostics Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.02846 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +8 CWE-426

TI-2023-18061 CVE-2023-36004 · GHSA-8qjv-8x85-xvqv

Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

LOW 36

Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01369 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-287

TI-2023-08122 CVE-2023-21740 · GHSA-7gx6-g552-8q57

Windows Media Remote Code Execution Vulnerability

LOW 36

Windows Media Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01085 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +11 CWE-122

TI-2023-17737 CVE-2023-35629 · GHSA-3fj4-jwj4-55c8

Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

LOW 32

Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00855 Published 2023-12-12 Fixed in 10.0.10240.20345, 6.0.6003.22413 +3 CWE-125

TI-2023-17748 CVE-2023-35642 · GHSA-pmg7-23ph-4pf9

Internet Connection Sharing (ICS) Denial of Service Vulnerability

LOW 31

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01282 Published 2023-12-12 Fixed in 10.0.17763.5206, 10.0.20348.2159 +12 CWE-682