Microsoft · Security update · September 12, 2023

KB5030325: September 2023 security update

KB5030325, released September 12, 2023, fixes 19 CVEs across 2 products. One of them is being exploited (CVE-2023-36802); 1 on CISA KEV. Patch Radar priority: Patch now.

Patch now1 on CISA KEV

CVEs closed

1 rated Critical

Exploited

CVE-2023-36802

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.2791

98th percentile

Priority of the 19 CVEs

Patch now 1
                                Urgent 8
                                High 7
                                Routine 3

Applies to

Product
Windows Server 2022
Windows Server 2022 (Server Core installation)

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2023-36802	Microsoft Streaming Service	Elevation of Privilege	7.8	0.2791	KEVExploited
Urgent	CVE-2023-38152	Windows DHCP Server	Information Disclosure	5.3	0.2402	More likely
Urgent	CVE-2023-38148	Windows Internet Connection Sharing (ICS)	Remote Code Execution	8.8	0.0770	More likely
Urgent	CVE-2023-38142	Windows Kernel	Elevation of Privilege	7.8	0.0555	More likely
Urgent	CVE-2023-38144	Windows Common Log File System Driver	Elevation of Privilege	7.8	0.0345	More likely
Urgent	CVE-2023-38143	Windows Common Log File System Driver	Elevation of Privilege	7.8	0.0341	More likely
Urgent	CVE-2023-38160	Windows TCP/IP	Information Disclosure	5.5	0.0094	More likely
Urgent	CVE-2023-36804	Windows GDI	Elevation of Privilege	7.8	0.0060	More likely
Urgent	CVE-2023-38161	Windows GDI	Elevation of Privilege	7.8	0.0059	More likely
High	CVE-2023-38162	Windows DHCP Server	Denial of Service	7.5	0.1069	Exploitation Less Likely
High	CVE-2023-38149	Windows TCP/IP	Denial of Service	7.5	0.0448	Exploitation Less Likely
High	CVE-2023-36805	Windows Scripting	Security Feature Bypass	7.0	0.0176	Exploitation Less Likely
High	CVE-2023-38139	Windows Kernel	Elevation of Privilege	7.8	0.0093	Exploitation Less Likely
High	CVE-2023-38147	Microsoft Windows Codecs Library	Remote Code Execution	8.8	0.0089	Exploitation Less Likely
High	CVE-2023-38141	Windows Kernel	Elevation of Privilege	7.8	0.0063	Exploitation Less Likely
High	CVE-2023-35355	Windows Cloud Files Mini Filter Driver	Elevation of Privilege	7.8	0.0059	Exploitation Less Likely
Routine	CVE-2023-36801	Windows DHCP Server	Information Disclosure	5.3	0.0165	Exploitation Less Likely
Routine	CVE-2023-38140	Windows Kernel	Information Disclosure	5.5	0.0106	Exploitation Less Likely
Routine	CVE-2023-36803	Windows Kernel	Information Disclosure	5.5	0.0099	Exploitation Less Likely

Released the same day

KB5002100
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5002457
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5002470
Microsoft Office Online Server
KB5002472
Microsoft SharePoint Server 2019
KB5002474
Microsoft SharePoint Server Subscription Edition
KB5002477
Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1 (32-bit editions), Microsoft Office 2013 Service Pack 1 (64-bit editions)
KB5002483
Microsoft Word 2013 RT Service Pack 1, Microsoft Word 2013 Service Pack 1 (32-bit editions), Microsoft Word 2013 Service Pack 1 (64-bit editions)
KB5002488
Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2013 Service Pack 1 (32-bit editions), Microsoft Excel 2013 Service Pack 1 (64-bit editions)
KB5002494
Microsoft SharePoint Enterprise Server 2016
KB5002496
Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)
KB5002497
Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)
KB5002498
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)

Vendor advisory

https://support.microsoft.com/help/5030325

For tools and AI agents

This page as data: JSON · Markdown

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.