Microsoft · Security update · June 13, 2023

KB5027275: June 2023 security update

KB5027275, released June 13, 2023, fixes 18 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product
CVEs closed
18
3 rated Critical
Exploited
0
None reported
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.0539
92nd percentile

Priority of the 18 CVEs

Patch now 0 Urgent 6 High 10 Routine 2

Applies to

Product
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Urgent CVE-2023-29371 Windows Win32K Elevation of Privilege 7.8 0.0539 More likely
Urgent CVE-2023-29358 Windows GDI Elevation of Privilege 7.8 0.0473 More likely
Urgent CVE-2023-32015 Windows PGM Remote Code Execution 9.8 0.0204 Exploitation Less Likely
Urgent CVE-2023-29363 Windows PGM Remote Code Execution 9.8 0.0194 Exploitation Less Likely
Urgent CVE-2023-32014 Windows PGM Remote Code Execution 9.8 0.0194 Exploitation Less Likely
Urgent CVE-2023-29359 Windows Win32K Elevation of Privilege 7.8 0.0055 More likely
High CVE-2023-32011 Windows iSCSI Denial of Service 7.5 0.0194 Exploitation Less Likely
High CVE-2023-29351 Windows Group Policy Elevation of Privilege 8.1 0.0181 Exploitation Less Likely
High CVE-2023-29362 Remote Desktop Client Remote Code Execution 8.8 0.0135 Exploitation Less Likely
High CVE-2023-29372 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0135 Exploitation Less Likely
High CVE-2023-29373 Windows ODBC Driver Remote Code Execution 8.8 0.0135 Exploitation Less Likely
High CVE-2023-29365 Microsoft Windows Codecs Library Remote Code Execution 7.8 0.0072 Exploitation Less Likely
High CVE-2023-32017 Microsoft Printer Drivers Remote Code Execution 7.8 0.0050 Exploitation Less Likely
High CVE-2023-29346 Windows NTFS Elevation of Privilege 7.8 0.0049 Exploitation Less Likely
High CVE-2023-29364 Windows Authentication Methods Elevation of Privilege 7.0 0.0037 Exploitation Less Likely
High CVE-2023-29368 Windows Filtering Elevation of Privilege 7.0 0.0037 Exploitation Less Likely
Routine CVE-2023-32016 Windows Installer Information Disclosure 5.5 0.0067 Exploitation Less Likely
Routine CVE-2023-32020 Role: DNS Server Spoofing 5.6 0.0066 Exploitation Less Likely
Showing 1 to 18 of 18 1