Microsoft Patch Tuesday, November 2023 Edition

Summary: Microsoft released updates on November 14, 2023 to fix more than five dozen security holes in Windows and related software, including three zero-day vulnerabilities already being exploited in active attacks. The zero-days are CVE-2023-36025, a SmartScreen bypass triggered by a booby-trapped shortcut link, CVE-2023-36033, a DWM Core Library flaw allowing local privilege escalation to SYSTEM, and CVE-2023-36036, a Windows Cloud Files Mini Filter Driver flaw used to elevate privileges on a compromised PC.
Why it matters: Two of the three zero-days are privilege-escalation bugs that need no user interaction and can hand attackers SYSTEM rights after initial access, while the Exchange flaw CVE-2023-36439 only requires a pair of phished credentials to install malicious software on the server.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2023-36025 CVE-2023-36033 CVE-2023-36035 CVE-2023-36036 CVE-2023-36038 CVE-2023-36039 CVE-2023-36050 CVE-2023-36413 CVE-2023-36439
Related: Microsoft discloses only three critical vulnerabilities in November’s Patch Tuesday update, three other zero-days Cyber Risks ·
We all just need to agree that ad blockers are good Cyber Risks ·
CVE-2023-36036: Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Nov 14, 2023