Patch Tuesday Archive
Patch Tuesday September 2023
Total CVEs
62
Critical
5
Important
54
Exploited
2
Publicly Disclosed
1
All CVEs this month 62
| CVE | Title | Severity | CVSS | Product | Exploited | Disclosed | Diffed |
|---|---|---|---|---|---|---|---|
| CVE-2023-29332 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | Critical | 9.8 |
Microsoft Azure Kubernetes Service | - | - | - |
| CVE-2023-35355 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Cloud Files Mini Filter Driver | - | - | - |
| CVE-2023-33136 | Azure DevOps Server Remote Code Execution Vulnerability | Important | 8.8 |
Azure DevOps | - | - | - |
| CVE-2023-38162 | DHCP Server Service Denial of Service Vulnerability | Important | 7.5 |
Windows DHCP Server | - | - | - |
| CVE-2023-38161 | Windows GDI Elevation of Privilege Vulnerability | Important | 7.8 |
Windows GDI | - | - | - |
| CVE-2023-38156 | Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability | Important | 7.2 |
Azure HDInsights | - | - | - |
| CVE-2023-38152 | DHCP Server Service Information Disclosure Vulnerability | Important | 5.3 |
Windows DHCP Server | - | - | - |
| CVE-2023-38150 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kernel | - | - | - |
| CVE-2023-38149 | Windows TCP/IP Denial of Service Vulnerability | Important | 7.5 |
Windows TCP/IP | - | - | - |
| CVE-2023-38148 | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability | Critical | 8.8 |
Windows Internet Connection Sharing (ICS) | - | - | - |
| CVE-2023-38147 | Windows Miracast Wireless Display Remote Code Execution Vulnerability | Important | 8.8 |
Microsoft Windows Codecs Library | - | - | - |
| CVE-2023-38146 | Windows Themes Remote Code Execution Vulnerability | Important | 8.8 |
Windows Themes | - | - | - |
| CVE-2023-38144 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Common Log File System Driver | - | - | - |
| CVE-2023-38143 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Common Log File System Driver | - | - | - |
| CVE-2023-38142 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kernel | - | - | - |
| CVE-2023-38141 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kernel | - | - | - |
| CVE-2023-38140 | Windows Kernel Information Disclosure Vulnerability | Important | 5.5 |
Windows Kernel | - | - | - |
| CVE-2023-38139 | Windows Kernel Elevation of Privilege Vulnerability | Important | 7.8 |
Windows Kernel | - | - | - |
| CVE-2023-36805 | Windows MSHTML Platform Security Feature Bypass Vulnerability | Important | 7 |
Windows Scripting | - | - | - |
| CVE-2023-36804 | Windows GDI Elevation of Privilege Vulnerability | Important | 7.8 |
Windows GDI | - | - | - |
| CVE-2023-36803 | Windows Kernel Information Disclosure Vulnerability | Important | 5.5 |
Windows Kernel | - | - | - |
| CVE-2023-36802 | Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability | Important | 7.8 |
Microsoft Streaming Service | Yes | - | Yes |
| CVE-2023-36801 | DHCP Server Service Information Disclosure Vulnerability | Important | 5.3 |
Windows DHCP Server | - | - | - |
| CVE-2023-36767 | Microsoft Office Security Feature Bypass Vulnerability | Important | 4.3 |
Microsoft Office | - | - | - |
| CVE-2023-36766 | Microsoft Excel Information Disclosure Vulnerability | Important | 5.5 |
Microsoft Office Excel | - | - | - |
| CVE-2023-36765 | Microsoft Office Elevation of Privilege Vulnerability | Important | 9.8 |
Microsoft Office | - | - | - |
| CVE-2023-36759 | Visual Studio Elevation of Privilege Vulnerability | Important | 6.7 |
Visual Studio | - | - | - |
| CVE-2023-36758 | Visual Studio Elevation of Privilege Vulnerability | Important | 9.8 |
Visual Studio | - | - | - |
| CVE-2023-36757 | Microsoft Exchange Server Spoofing Vulnerability | Important | 8 |
Microsoft Exchange Server | - | - | - |
| CVE-2023-36756 | Microsoft Exchange Server Remote Code Execution Vulnerability | Important | 8 |
Microsoft Exchange Server | - | - | - |
| CVE-2023-36745 | Microsoft Exchange Server Remote Code Execution Vulnerability | Important | 8 |
Microsoft Exchange Server | - | - | - |
| CVE-2023-36744 | Microsoft Exchange Server Remote Code Execution Vulnerability | Important | 8 |
Microsoft Exchange Server | - | - | - |
| CVE-2023-36742 | Visual Studio Code Remote Code Execution Vulnerability | Important | 7.8 |
Visual Studio Code | - | - | - |
| CVE-2023-36736 | Microsoft Identity Linux Broker Remote Code Execution Vulnerability | Important | 4.4 |
Microsoft Identity Linux Broker | - | - | - |
| CVE-2023-41764 | Microsoft Office Spoofing Vulnerability | Moderate | 5.5 |
Microsoft Office | - | - | - |
| CVE-2023-36562 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Moderate | 7.1 |
Microsoft Edge (Chromium-based) | - | - | - |
| CVE-2023-36735 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | Moderate | 9.6 |
Microsoft Edge (Chromium-based) | - | - | - |
| CVE-2023-36727 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | Important | 6.1 |
Microsoft Edge (Chromium-based) | - | - | - |
| CVE-2023-36886 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | Important | 5.4 |
Microsoft Dynamics | - | - | - |
| CVE-2023-38164 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | Important | 5.4 |
Microsoft Dynamics | - | - | - |
| CVE-2023-38160 | Windows TCP/IP Information Disclosure Vulnerability | Important | 5.5 |
Windows TCP/IP | - | - | - |
| CVE-2023-38155 | Azure DevOps Server Remote Code Execution Vulnerability | Important | 8.1 |
Azure DevOps | - | - | - |
| CVE-2023-36800 | Dynamics Finance and Operations Cross-site Scripting Vulnerability | Important | 5.4 |
Microsoft Dynamics Finance & Operations | - | - | - |
| CVE-2023-36799 | .NET Core and Visual Studio Denial of Service Vulnerability | Important | 6.5 |
.NET Core & Visual Studio | - | - | - |
| CVE-2023-36796 | Visual Studio Remote Code Execution Vulnerability | Critical | 7.8 |
.NET and Visual Studio | - | - | - |
| CVE-2023-36794 | Visual Studio Remote Code Execution Vulnerability | Important | 7.8 |
.NET and Visual Studio | - | - | - |
| CVE-2023-36793 | Visual Studio Remote Code Execution Vulnerability | Critical | 7.8 |
.NET and Visual Studio | - | - | - |
| CVE-2023-36792 | Visual Studio Remote Code Execution Vulnerability | Critical | 7.8 |
.NET and Visual Studio | - | - | - |
| CVE-2023-36788 | .NET Framework Remote Code Execution Vulnerability | Important | 7.8 |
.NET Framework | - | - | - |
| CVE-2023-36773 | 3D Builder Remote Code Execution Vulnerability | Important | 7.8 |
3D Builder | - | - | - |
| CVE-2023-36772 | 3D Builder Remote Code Execution Vulnerability | Important | 7.8 |
3D Builder | - | - | - |
| CVE-2023-36771 | 3D Builder Remote Code Execution Vulnerability | Important | 7.8 |
3D Builder | - | - | - |
| CVE-2023-36770 | 3D Builder Remote Code Execution Vulnerability | Important | 7.8 |
3D Builder | - | - | - |
| CVE-2023-36764 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | Important | 8.8 |
Microsoft Office SharePoint | - | - | - |
| CVE-2023-36763 | Microsoft Outlook Information Disclosure Vulnerability | Important | 7.5 |
Microsoft Office Outlook | - | - | - |
| CVE-2023-36762 | Microsoft Word Remote Code Execution Vulnerability | Important | 7.3 |
Microsoft Office Word | - | - | - |
| CVE-2023-36761 | Microsoft Word Information Disclosure Vulnerability | Important | 6.5 |
Microsoft Office Word | Yes | Yes | - |
| CVE-2023-36760 | 3D Viewer Remote Code Execution Vulnerability | Important | 7.8 |
3D Viewer | - | - | - |
| CVE-2023-36777 | Microsoft Exchange Server Information Disclosure Vulnerability | Important | 5.7 |
Microsoft Exchange Server | - | - | - |
| CVE-2023-36740 | 3D Viewer Remote Code Execution Vulnerability | Important | 7.8 |
3D Viewer | - | - | - |
| CVE-2023-36739 | 3D Viewer Remote Code Execution Vulnerability | Important | 7.8 |
3D Viewer | - | - | - |
| CVE-2023-38163 | Windows Defender Attack Surface Reduction Security Feature Bypass | Important | 7.8 |
Windows Defender | - | - | - |
Threat Categories 6
| Threat Category | CVEs | Critical |
|---|---|---|
| Remote Code Execution | 22 | 4 |
| Elevation of Privilege | 19 | 1 |
| Information Disclosure | 9 | - |
| Spoofing | 6 | - |
| Denial of Service | 3 | - |
| Security Feature Bypass | 3 | - |
Affected Products 32
| Product | CVEs | Exploited |
|---|---|---|
| Windows Kernel | 6 | - |
| Microsoft Exchange Server | 5 | - |
| .NET and Visual Studio | 4 | - |
| 3D Builder | 4 | - |
| 3D Viewer | 3 | - |
| Microsoft Edge (Chromium-based) | 3 | - |
| Microsoft Office | 3 | - |
| Windows DHCP Server | 3 | - |
| Azure DevOps | 2 | - |
| Microsoft Dynamics | 2 | - |
| Microsoft Office Word | 2 | 1 |
| Visual Studio | 2 | - |
| Windows Common Log File System Driver | 2 | - |
| Windows GDI | 2 | - |
| Windows TCP/IP | 2 | - |
| .NET Core & Visual Studio | 1 | - |
| .NET Framework | 1 | - |
| Azure HDInsights | 1 | - |
| Microsoft Azure Kubernetes Service | 1 | - |
| Microsoft Dynamics Finance & Operations | 1 | - |
| Microsoft Identity Linux Broker | 1 | - |
| Microsoft Office Excel | 1 | - |
| Microsoft Office Outlook | 1 | - |
| Microsoft Office SharePoint | 1 | - |
| Microsoft Streaming Service | 1 | 1 |
| Microsoft Windows Codecs Library | 1 | - |
| Visual Studio Code | 1 | - |
| Windows Cloud Files Mini Filter Driver | 1 | - |
| Windows Defender | 1 | - |
| Windows Internet Connection Sharing (ICS) | 1 | - |
| Windows Scripting | 1 | - |
| Windows Themes | 1 | - |