Microsoft · Security update · July 11, 2023

KB5028226: July 2023 security update

KB5028226, released July 11, 2023, fixes 47 CVEs across 4 products. 2 of them are being exploited (CVE-2023-36874); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVUnsupported product
CVEs closed
47
5 rated Critical
Exploited
2
CVE-2023-36874
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.4256
98th percentile

Priority of the 47 CVEs

Patch now 2 Urgent 7 High 14 Routine 24

Applies to

Product
Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2023-36874 Windows Error Reporting Elevation of Privilege 7.8 0.4256 KEVExploited
Patch now CVE-2023-32046 Windows MSHTML Platform Elevation of Privilege 7.8 0.0997 KEVExploited
Urgent CVE-2022-38023 Windows Netlogon Elevation of Privilege 8.1 0.0275 More likely
Urgent CVE-2023-32057 Windows Message Queuing Remote Code Execution 9.8 0.0221 Exploitation Less Likely
Urgent CVE-2023-35365 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 9.8 0.0177 Exploitation Less Likely
Urgent CVE-2023-35366 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 9.8 0.0169 Exploitation Less Likely
Urgent CVE-2023-35367 Windows Routing and Remote Access Service (RRAS) Remote Code Execution 9.8 0.0169 Exploitation Less Likely
Urgent CVE-2023-21526 Windows Netlogon Information Disclosure 7.4 0.0113 More likely
Urgent CVE-2023-35297 Windows PGM Remote Code Execution 8.1 0.0112 Exploitation Less Likely
High CVE-2023-35338 Windows Peer Name Resolution Protocol Denial of Service 7.5 0.0196 Exploitation Less Likely
High CVE-2023-32044 Windows Message Queuing Denial of Service 7.5 0.0152 Exploitation Less Likely
High CVE-2023-32045 Windows Message Queuing Denial of Service 7.5 0.0152 Exploitation Less Likely
High CVE-2023-35303 Microsoft Windows Codecs Library Remote Code Execution 8.8 0.0145 Exploitation Less Likely
High CVE-2023-35300 Windows Remote Procedure Call Remote Code Execution 8.8 0.0139 Exploitation Less Likely
High CVE-2023-35322 Windows Deployment Services Remote Code Execution 8.8 0.0139 Exploitation Less Likely
High CVE-2023-32038 Windows ODBC Driver Remote Code Execution 8.8 0.0124 Exploitation Less Likely
High CVE-2023-35350 Windows Active Directory Certificate Services Remote Code Execution 7.2 0.0122 Exploitation Less Likely
High CVE-2023-33154 Windows Partition Management Driver Elevation of Privilege 7.8 0.0079 Exploitation Less Likely
High CVE-2023-35309 Windows Message Queuing Remote Code Execution 7.5 0.0079 Exploitation Less Likely
High CVE-2023-35328 Windows Transaction Manager Elevation of Privilege 7.8 0.0043 Exploitation Less Likely
High CVE-2023-35299 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0041 Exploitation Less Likely
High CVE-2023-32050 Windows Installer Elevation of Privilege 7.0 0.0040 Exploitation Less Likely
High CVE-2023-35340 Windows CNG Key Isolation Service Elevation of Privilege 7.8 0.0027 Exploitation Less Likely
Routine CVE-2023-32034 Windows Remote Procedure Call Denial of Service 6.5 0.0163 Exploitation Less Likely
Routine CVE-2023-32035 Windows Remote Procedure Call Denial of Service 6.5 0.0163 Exploitation Less Likely
Showing 1 to 25 of 47 1Next