Microsoft · Security update · October 10, 2023
KB5031364: October 2023 cumulative update for Windows Server 2022
KB5031364, released October 10, 2023, fixes 80 CVEs across 2 products. 3 of them are being exploited (CVE-2023-44487); 3 on CISA KEV. Patch Radar priority: Patch now.
Patch now3 on CISA KEV1 publicly disclosed
CVEs closed
80
13 rated Critical
Exploited
3
CVE-2023-44487
Exploitation more likely
10
Vendor assessment
Highest EPSS
1.0000
99th percentile
Priority of the 80 CVEs
Patch now 3
Urgent 22
High 47
Routine 8
Applies to
| Product | Build after install |
|---|---|
| Windows Server 2022 | 20348.2031 |
| Windows Server 2022 (Server Core installation) | 20348.2031 |
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2023-44487 | HTTP/2 | Denial of Service | 7.5 | 1.0000 | KEVExploited |
| Patch now | CVE-2023-36563 | Microsoft WordPad | Information Disclosure | 6.5 | 0.2032 | KEVDisclosedExploited |
| Patch now | CVE-2023-36584 | Windows Mark of the Web (MOTW) | Security Feature Bypass | 5.4 | 0.0325 | KEVExploited |
| Urgent | CVE-2023-38171 | Microsoft QUIC | Denial of Service | 7.5 | 0.7105 | More likely |
| Urgent | CVE-2023-41772 | Windows Win32K | Elevation of Privilege | 7.8 | 0.1331 | More likely |
| Urgent | CVE-2023-36594 | Microsoft Graphics Component | Elevation of Privilege | 7.8 | 0.0800 | More likely |
| Urgent | CVE-2023-36713 | Windows Common Log File System Driver | Information Disclosure | 5.5 | 0.0733 | More likely |
| Urgent | CVE-2023-36731 | Windows Win32K | Elevation of Privilege | 7.8 | 0.0662 | More likely |
| Urgent | CVE-2022-37967 | Windows Kerberos | Elevation of Privilege | 7.2 | 0.0416 | More likely |
| Urgent | CVE-2023-38159 | Microsoft Graphics Component | Elevation of Privilege | 7.0 | 0.0406 | More likely |
| Urgent | CVE-2023-36743 | Windows Win32K | Elevation of Privilege | 7.8 | 0.0363 | More likely |
| Urgent | CVE-2023-35349 | Windows Message Queuing | Remote Code Execution | 9.8 | 0.0289 | Exploitation Less Likely |
| Urgent | CVE-2023-36697 | Windows Message Queuing | Remote Code Execution | 6.8 | 0.0220 | Exploitation Less Likely |
| Urgent | CVE-2023-36776 | Windows Win32K | Elevation of Privilege | 7.0 | 0.0205 | More likely |
| Urgent | CVE-2023-36718 | Windows Virtual Trusted Platform Module | Remote Code Execution | 7.8 | 0.0133 | Exploitation Less Likely |
| Urgent | CVE-2023-41773 | Windows Layer 2 Tunneling Protocol | Remote Code Execution | 8.1 | 0.0131 | Exploitation Less Likely |
| Urgent | CVE-2023-41774 | Windows Layer 2 Tunneling Protocol | Remote Code Execution | 8.1 | 0.0131 | Exploitation Less Likely |
| Urgent | CVE-2023-38166 | Windows Layer 2 Tunneling Protocol | Remote Code Execution | 8.1 | 0.0130 | Exploitation Less Likely |
| Urgent | CVE-2023-41765 | Windows Layer 2 Tunneling Protocol | Remote Code Execution | 8.1 | 0.0130 | Exploitation Less Likely |
| Urgent | CVE-2023-41767 | Windows Layer 2 Tunneling Protocol | Remote Code Execution | 8.1 | 0.0130 | Exploitation Less Likely |
| Urgent | CVE-2023-41768 | Windows Layer 2 Tunneling Protocol | Remote Code Execution | 8.1 | 0.0130 | Exploitation Less Likely |
| Urgent | CVE-2023-41769 | Windows Layer 2 Tunneling Protocol | Remote Code Execution | 8.1 | 0.0130 | Exploitation Less Likely |
| Urgent | CVE-2023-41770 | Windows Layer 2 Tunneling Protocol | Remote Code Execution | 8.1 | 0.0130 | Exploitation Less Likely |
| Urgent | CVE-2023-41771 | Windows Layer 2 Tunneling Protocol | Remote Code Execution | 8.1 | 0.0130 | Exploitation Less Likely |
| Urgent | CVE-2023-36732 | Windows Win32K | Elevation of Privilege | 7.8 | 0.0063 | More likely |
Showing 1 to 25 of 80
1Next