Microsoft discloses 5 critical vulnerabilities in June's Patch Tuesday, no zero-days
Summary: Microsoft's June Patch Tuesday disclosed 69 vulnerabilities across its products, of which five are rated critical, 45 high, 17 medium and two low. For the first time in four months, none of the disclosed vulnerabilities had been exploited in the wild, and the total rose from 40 last month, which was nearly a three-year low.
What's compelling: Three critical Windows Pragmatic General Multicast server flaws (CVE-2023-29363, CVE-2023-32014, CVE-2023-32015) carry a severity score of 9.8 and allow remote code execution from a specially crafted file sent over the network, while SharePoint Server CVE-2023-29357, also 9.8, lets an attacker spoof JWT authentication tokens and gain administrator-level privileges with no user interaction.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2023-28310CVE-2023-29352CVE-2023-29357CVE-2023-29358CVE-2023-29361CVE-2023-29363CVE-2023-29371CVE-2023-32014CVE-2023-32015CVE-2023-32031
- Related
- Microsoft Patch Tuesday, June 2023 Edition Cyber Risks ·CVE-2023-29357: Microsoft Share Point Server Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Jan 10, 2024Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026