Microsoft · Security update · September 12, 2023
KB5030524: September 2023 security update
KB5030524, released September 12, 2023, fixes 11 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
11
None rated Critical
Exploited
0
None reported
Exploitation more likely
6
Vendor assessment
Highest EPSS
0.7617
99th percentile
Priority of the 11 CVEs
Patch now 0
Urgent 6
High 5
Routine 0
Applies to
| Product |
|---|
| Microsoft Exchange Server 2016 Cumulative Update 23 |
| Microsoft Exchange Server 2019 Cumulative Update 12 |
| Microsoft Exchange Server 2019 Cumulative Update 13 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2023-36745 | Microsoft Exchange Server | Remote Code Execution | 8.0 | 0.7617 | More likely |
| Urgent | CVE-2023-36744 | Microsoft Exchange Server | Remote Code Execution | 8.0 | 0.5711 | More likely |
| Urgent | CVE-2023-36777 | Microsoft Exchange Server | Information Disclosure | 5.7 | 0.5201 | More likely |
| Urgent | CVE-2023-36756 | Microsoft Exchange Server | Remote Code Execution | 8.0 | 0.4919 | More likely |
| Urgent | CVE-2023-35388 | Microsoft Exchange Server | Remote Code Execution | 8.0 | 0.0685 | More likely |
| Urgent | CVE-2023-38182 | Microsoft Exchange Server | Remote Code Execution | 8.0 | 0.0592 | More likely |
| High | CVE-2023-36757 | Microsoft Exchange Server | Spoofing | 8.0 | 0.3692 | Exploitation Less Likely |
| High | CVE-2023-38181 | Microsoft Exchange Server | Spoofing | 8.8 | 0.1080 | Exploitation Less Likely |
| High | CVE-2023-38185 | Microsoft Exchange Server | Remote Code Execution | 8.8 | 0.0268 | Exploitation Less Likely |
| High | CVE-2023-35368 | Microsoft Exchange Server | Remote Code Execution | 8.8 | 0.0249 | Exploitation Less Likely |
| High | CVE-2023-21709 | Microsoft Exchange Server | Elevation of Privilege | 9.8 | 0.0198 | Exploitation Less Likely |
Showing 1 to 11 of 11
1