Microsoft · Security update · August 8, 2023

KB5029367: August 2023 security update

KB5029367, released August 8, 2023, fixes 31 CVEs across 2 products. One of them is being exploited (CVE-2023-36884); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEVKnown ransomware use1 publicly disclosed
CVEs closed
31
3 rated Critical
Exploited
1
CVE-2023-36884
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.9944
99th percentile

Priority of the 31 CVEs

Patch now 1 Urgent 9 High 10 Routine 11

Applies to

Product
Windows Server 2022
Windows Server 2022 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2023-36884 Microsoft Windows Search Component Remote Code Execution 7.5 0.9944 KEVRansomwareDisclosedExploited
Urgent CVE-2023-36900 Windows Common Log File System Driver Elevation of Privilege 7.8 0.1017 More likely
Urgent CVE-2023-35359 Windows Kernel Elevation of Privilege 7.8 0.0989 More likely
Urgent CVE-2023-35382 Windows Kernel Elevation of Privilege 7.8 0.0558 More likely
Urgent CVE-2023-35386 Windows Kernel Elevation of Privilege 7.8 0.0555 More likely
Urgent CVE-2023-35380 Windows Kernel Elevation of Privilege 7.8 0.0358 More likely
Urgent CVE-2023-36910 Windows Message Queuing Remote Code Execution 9.8 0.0251 Exploitation Less Likely
Urgent CVE-2023-35385 Windows Message Queuing Remote Code Execution 9.8 0.0249 Exploitation Less Likely
Urgent CVE-2023-36911 Windows Message Queuing Remote Code Execution 9.8 0.0171 Exploitation Less Likely
Urgent CVE-2023-35384 Windows HTML Platform Security Feature Bypass 5.4 0.0157 More likely
High CVE-2023-35383 Windows Message Queuing Information Disclosure 7.5 0.0301 Exploitation Less Likely
High CVE-2023-36912 Windows Message Queuing Denial of Service 7.5 0.0207 Exploitation Less Likely
High CVE-2023-38172 Windows Message Queuing Denial of Service 7.5 0.0197 Exploitation Less Likely
High CVE-2023-35381 Windows Fax and Scan Service Remote Code Execution 8.8 0.0191 Exploitation Less Likely
High CVE-2023-36903 Windows System Assessment Tool Elevation of Privilege 7.8 0.0163 Exploitation Less Likely
High CVE-2023-38184 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution 7.5 0.0146 Exploitation Less Likely
High CVE-2023-36882 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0141 Exploitation Less Likely
High CVE-2023-38186 Windows Mobile Device Management Elevation of Privilege 8.8 0.0130 Exploitation Less Likely
High CVE-2023-36904 Windows Cloud Files Mini Filter Driver Elevation of Privilege 7.8 0.0058 Exploitation Less Likely
High CVE-2023-35378 Windows Projected File System Elevation of Privilege 7.0 0.0035 Exploitation Less Likely
Routine CVE-2023-20569 Microsoft Windows Information Disclosure 5.6 0.0730 Exploitation Less Likely
Routine CVE-2023-35376 Windows Message Queuing Denial of Service 6.5 0.0221 Exploitation Less Likely
Routine CVE-2023-35377 Windows Message Queuing Denial of Service 6.5 0.0221 Exploitation Less Likely
Routine CVE-2023-36909 Windows Message Queuing Denial of Service 6.5 0.0206 Exploitation Less Likely
Routine CVE-2023-36906 Windows Cryptographic Services Information Disclosure 5.5 0.0199 Exploitation Less Likely
Showing 1 to 25 of 31 1Next