Microsoft November 2023 Patch Tuesday fixes 5 zero-days, 58 flaws

At this time is Microsoft’s November 2023 Patch Tuesday, which incorporates security updates for a complete of 58 flaws and 5 zero-day vulnerabilities.

Whereas fourteen distant code execution (RCE) bugs have been mounted, Microsoft solely rated one as essential. The three essential flaws mounted at present are an Azure info disclosure bug, an RCE in Home windows Web Connection Sharing (ICS), and a Hyper-V escape flaw that permits the executions of packages on the host with SYSTEM privileges.

The variety of bugs in every vulnerability class is listed beneath:

• 26 Elevation of Privilege Vulnerabilities
• 3 Safety Characteristic Bypass Vulnerabilities
• 45 Distant Code Execution Vulnerabilities
• 12 Data Disclosure Vulnerabilities
• 17 Denial of Service Vulnerabilities
• 1 Spoofing Vulnerabilities

The whole rely of 58 flaws doesn’t embrace 5 Mariner security updates and 20 Microsoft Edge security updates launched earlier this month.

To study extra concerning the non-security updates launched at present, you’ll be able to evaluation our devoted articles on the brand new Home windows 11 KB5032190 cumulative replace and Home windows 10 KB5032189 cumulative replace.

5 zero-days mounted

This month’s Patch Tuesday fixes 5 zero-day vulnerabilities, with three exploited in assaults and three publicly disclosed.

Microsoft classifies a vulnerability as a zero-day whether it is publicly disclosed or actively exploited with no official repair accessible.

The three actively exploited zero-day vulnerabilities in at present’s updates are:

CVE-2023-36036 – Home windows Cloud Information Mini Filter Driver Elevation of Privilege Vulnerability

Microsoft has mounted an actively exploited Home windows Cloud Information Mini Filter Elevation of Privileges bug.

“An attacker who efficiently exploited this vulnerability might achieve SYSTEM privileges,” explains Microsoft.

It’s not recognized how the flaw was abused in assaults or by what menace actor.

The flaw was found internally by the Microsoft Risk Intelligence Microsoft Safety Response Middle.

CVE-2023-36033 – Home windows DWM Core Library Elevation of Privilege Vulnerability

Microsoft has mounted an actively exploited and publicly disclosed Home windows DWM Core Library vulnerability that can be utilized to raise privileges to SYSTEM.

“An attacker who efficiently exploited this vulnerability might achieve SYSTEM privileges,” explains Microsoft.

Microsoft says that the flaw was found by Quan Jin(@jq0904) with DBAPPSecurity WeBin Lab however didn’t share particulars on how they have been utilized in assaults.

CVE-2023-36025 – Home windows SmartScreen Safety Characteristic Bypass Vulnerability

Microsoft has mounted an actively exploited Home windows SmartScreen flaw that permits a malicious Web Shortcut to bypass security checks and warnings.

“The attacker would be capable of bypass Home windows Defender SmartScreen checks and their related prompts,” explains Microsoft.

“The person must click on on a specifically crafted Web Shortcut (.URL) or a hyperlink pointing to an Web Shortcut file to be compromised by the attacker,” continues Microsoft.

Microsoft says that the flaw was found by Will Metcalf (Splunk), Microsoft Risk Intelligence, and the Microsoft Workplace Product Group Safety Crew.

BleepingComputer contacted Splunk concerning the flaw to study the way it was exploited.

As well as, Microsoft says that two different publicly disclosed zero-day bugs, ‘CVE-2023-36413 – Microsoft Workplace Safety Characteristic Bypass Vulnerability’ and the ‘CVE-2023-36038 — ASP.NET Core Denial of Service Vulnerability,’ have been additionally mounted as a part of at present’s Patch Tuesday.

Nevertheless, Microsoft says that they weren’t actively exploited in assaults.

Latest updates from different corporations

Different distributors who launched updates or advisories in November 2023 embrace:

The November 2023 Patch Tuesday Safety Updates

Beneath is the entire record of resolved vulnerabilities within the November 2023 Patch Tuesday updates.

To entry the total description of every vulnerability and the programs it impacts, you’ll be able to view the total report right here.