Threat Source newsletter (Feb. 16, 2023) — Recapping what we may have missed so far this year
Summary: Microsoft's February 2023 Patch Tuesday disclosed 73 vulnerabilities, including three zero-days - CVE-2023-23376, CVE-2023-21715 and CVE-2023-21823 - that Microsoft says are being actively exploited in the wild. The most severe is CVE-2023-21823, a Windows graphics component remote code execution flaw that could give an attacker System-level privileges, and Talos released new Snort rules to detect exploitation attempts.
What you should know: Three of the 73 flaws Microsoft shipped fixes for were already being used in attacks before the patch landed, so any delay in applying them leaves an actively exploited path to System-level access open.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2023-21715CVE-2023-21823CVE-2023-23376
- Related
- Microsoft Patch Tuesday, February 2023 Edition Cyber Risks ·CVE-2023-21823: Microsoft Windows Graphic Component Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Feb 14, 2023