Microsoft · Security update · August 8, 2023
KB5029318: August 2023 security update
KB5029318, released August 8, 2023, fixes 22 CVEs across 4 products. One of them is being exploited (CVE-2023-36884); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now1 on CISA KEVKnown ransomware use1 publicly disclosedUnsupported product
CVEs closed
22
3 rated Critical
Exploited
1
CVE-2023-36884
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.9944
99th percentile
Priority of the 22 CVEs
Patch now 1
Urgent 6
High 6
Routine 9
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2023-36884 | Microsoft Windows Search Component | Remote Code Execution | 7.5 | 0.9944 | KEVRansomwareDisclosedExploited |
| Urgent | CVE-2023-36900 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.1017 | More likely |
| Urgent | CVE-2023-35359 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0989 | More likely |
| Urgent | CVE-2023-35380 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0358 | More likely |
| Urgent | CVE-2023-36910 | Windows Message Queuing | Remote Code Execution | 9.8 | 0.0251 | Exploitation Less Likely |
| Urgent | CVE-2023-35385 | Windows Message Queuing | Remote Code Execution | 9.8 | 0.0249 | Exploitation Less Likely |
| Urgent | CVE-2023-36911 | Windows Message Queuing | Remote Code Execution | 9.8 | 0.0171 | Exploitation Less Likely |
| High | CVE-2023-35383 | Windows Message Queuing | Information Disclosure | 7.5 | 0.0301 | Exploitation Less Likely |
| High | CVE-2023-36912 | Windows Message Queuing | Denial of Service | 7.5 | 0.0207 | Exploitation Less Likely |
| High | CVE-2023-38172 | Windows Message Queuing | Denial of Service | 7.5 | 0.0197 | Exploitation Less Likely |
| High | CVE-2023-35381 | Windows Fax and Scan Service | Remote Code Execution | 8.8 | 0.0191 | Exploitation Less Likely |
| High | CVE-2023-38184 | Windows LDAP - Lightweight Directory Access Protocol | Remote Code Execution | 7.5 | 0.0146 | Exploitation Less Likely |
| High | CVE-2023-36882 | Microsoft WDAC OLE DB provider for SQL | Remote Code Execution | 8.8 | 0.0141 | Exploitation Less Likely |
| Routine | CVE-2023-20569 | Microsoft Windows | Information Disclosure | 5.6 | 0.0730 | Exploitation Less Likely |
| Routine | CVE-2023-35376 | Windows Message Queuing | Denial of Service | 6.5 | 0.0221 | Exploitation Less Likely |
| Routine | CVE-2023-35377 | Windows Message Queuing | Denial of Service | 6.5 | 0.0221 | Exploitation Less Likely |
| Routine | CVE-2023-36909 | Windows Message Queuing | Denial of Service | 6.5 | 0.0206 | Exploitation Less Likely |
| Routine | CVE-2023-36906 | Windows Cryptographic Services | Information Disclosure | 5.5 | 0.0199 | Exploitation Less Likely |
| Routine | CVE-2023-36907 | Windows Cryptographic Services | Information Disclosure | 5.5 | 0.0173 | Exploitation Less Likely |
| Routine | CVE-2023-36913 | Windows Message Queuing | Information Disclosure | 6.5 | 0.0169 | Exploitation Less Likely |
| Routine | CVE-2023-38254 | Windows Message Queuing | Denial of Service | 6.5 | 0.0164 | Exploitation Less Likely |
| Routine | CVE-2023-36889 | Windows Group Policy | Security Feature Bypass | 5.5 | 0.0063 | Exploitation Less Likely |
Showing 1 to 22 of 22
1