Microsoft discloses more than 130 vulnerabilities as part of July’s Patch Tuesday, four exploited in the wild
Summary: Microsoft's July Patch Tuesday disclosed more than 130 vulnerabilities, the most in a month since April 2022, including 10 rated critical and the rest rated important. Four important vulnerabilities were detected being exploited in the wild: CVE-2023-32046, CVE-2023-32049, CVE-2023-35311 and CVE-2023-36874, and Microsoft also issued an advisory on malicious use of Microsoft-signed drivers that Talos had reported after notifying Microsoft in February 2023.
Why it matters: The four flaws actually under attack are all rated only important, not critical, so a patch plan that prioritizes by severity rating alone would leave CVE-2023-36874 and the three prompt-bypass flaws exposed to active exploitation.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2023-32046CVE-2023-32049CVE-2023-35311CVE-2023-36874
- Related
- Apple & Microsoft Patch Tuesday, July 2023 Edition Cyber Risks ·CVE-2023-36874: Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Jul 11, 2023CVE-2023-35311: Microsoft Outlook Security Feature Bypass Vulnerability Known Exploited Vulnerabilities · Jul 11, 2023