Microsoft Patch Tuesday for April 2023 — Snort rules and prominent vulnerabilities
Summary: Microsoft's April 2023 Patch Tuesday fixed 99 vulnerabilities, including eight rated critical and 90 rated important, with one flaw actively exploited in the wild: CVE-2023-28252, an elevation of privilege bug in the Windows Common Log File System Driver that can yield SYSTEM privileges. CISA added that vulnerability to its known exploited list and urged federal agencies to patch quickly, while the most severe issue by score was CVE-2023-21554, a remote code execution flaw in Microsoft Message Queuing rated 9.8 out of 10 and considered 'more likely' to be exploited.
What you should know: April was the third consecutive Patch Tuesday with a vulnerability exploited before disclosure, and CVE-2023-21554's 9.8 score and 'more likely' exploitation rating mean an unpatched Message Queuing service listening on TCP port 1801 is a standing invitation.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-37969CVE-2023-21554CVE-2023-28219CVE-2023-28220CVE-2023-28231CVE-2023-28252
- Related
- Microsoft (& Apple) Patch Tuesday, April 2023 Edition Cyber Risks ·CVE-2023-28252: Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Apr 11, 2023