Microsoft · Security update · October 10, 2023

KB5031441: October 2023 security update

KB5031441, released October 10, 2023, fixes 57 CVEs across 2 products. 2 of them are being exploited (CVE-2023-36563); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
57
12 rated Critical
Exploited
2
CVE-2023-36563
Exploitation more likely
7
Vendor assessment
Highest EPSS
0.6936
99th percentile

Priority of the 57 CVEs

Patch now 2 Urgent 18 High 33 Routine 4

Applies to

Product
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2023-36563 Microsoft WordPad Information Disclosure 6.5 0.2032 KEVDisclosedExploited
Patch now CVE-2023-36584 Windows Mark of the Web (MOTW) Security Feature Bypass 5.4 0.0325 KEVExploited
Urgent CVE-2023-36594 Microsoft Graphics Component Elevation of Privilege 7.8 0.0800 More likely
Urgent CVE-2023-36713 Windows Common Log File System Driver Information Disclosure 5.5 0.0733 More likely
Urgent CVE-2023-36731 Windows Win32K Elevation of Privilege 7.8 0.0662 More likely
Urgent CVE-2022-37967 Windows Kerberos Elevation of Privilege 7.2 0.0482 More likely
Urgent CVE-2023-36743 Windows Win32K Elevation of Privilege 7.8 0.0363 More likely
Urgent CVE-2023-35349 Windows Message Queuing Remote Code Execution 9.8 0.0289 Exploitation Less Likely
Urgent CVE-2023-36697 Windows Message Queuing Remote Code Execution 6.8 0.0220 Exploitation Less Likely
Urgent CVE-2023-36776 Windows Win32K Elevation of Privilege 7.0 0.0205 More likely
Urgent CVE-2023-41773 Windows Layer 2 Tunneling Protocol Remote Code Execution 8.1 0.0131 Exploitation Less Likely
Urgent CVE-2023-41774 Windows Layer 2 Tunneling Protocol Remote Code Execution 8.1 0.0131 Exploitation Less Likely
Urgent CVE-2023-38166 Windows Layer 2 Tunneling Protocol Remote Code Execution 8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41765 Windows Layer 2 Tunneling Protocol Remote Code Execution 8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41767 Windows Layer 2 Tunneling Protocol Remote Code Execution 8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41768 Windows Layer 2 Tunneling Protocol Remote Code Execution 8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41769 Windows Layer 2 Tunneling Protocol Remote Code Execution 8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41770 Windows Layer 2 Tunneling Protocol Remote Code Execution 8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41771 Windows Layer 2 Tunneling Protocol Remote Code Execution 8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-36732 Windows Win32K Elevation of Privilege 7.8 0.0063 More likely
High CVE-2023-36606 Windows Message Queuing Denial of Service 7.5 0.6936 Exploitation Less Likely
High CVE-2023-36585 Windows UPnP Device Host Denial of Service 7.5 0.0260 Exploitation Less Likely
High CVE-2023-36703 Windows DHCP Server Denial of Service 7.5 0.0252 Exploitation Less Likely
High CVE-2023-36431 Windows Message Queuing Denial of Service 7.5 0.0248 Exploitation Less Likely
High CVE-2023-36579 Windows Message Queuing Denial of Service 7.5 0.0248 Exploitation Less Likely
Showing 1 to 25 of 57 1Next