Microsoft Patch Tuesday, May 2023 Edition
Summary: Microsoft released May 2023 updates fixing at least four dozen security holes in Windows and other software, including patches for two zero-day vulnerabilities already exploited in active attacks. The zero-days are CVE-2023-29336, a local elevation-of-privilege flaw in Windows, and CVE-2023-24932, a Secure Boot bypass exploited by BlackLotus bootkit malware that loads before the operating system starts.
Why it matters: Microsoft rates CVE-2023-24932 at CVSS 6.7, but Rapid7's Adam Barnett says that score is not a reliable metric here, and administrators must apply UEFI configuration changes after patching, including on Azure VMs with Secure Boot enabled, or the protection does not take effect.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2023-24932CVE-2023-24941CVE-2023-28283CVE-2023-29325CVE-2023-29336
- Related
- Microsoft Patch Tuesday for May 2023 — Fewest vulnerabilities disclosed in a month in three-plus years Cyber Risks ·CVE-2023-29336: Microsoft Win32K Privilege Escalation Vulnerability Known Exploited Vulnerabilities · May 09, 2023