Microsoft · Security update · November 14, 2023

KB5032189: November 2023 cumulative update for Windows 10 21H2

KB5032189, released November 14, 2023, fixes 28 CVEs across 12 products. 4 of them are being exploited (CVE-2023-36025); 4 on CISA KEV. Patch Radar priority: Patch now.

Patch now4 on CISA KEV4 publicly disclosed
CVEs closed
28
2 rated Critical
Exploited
4
CVE-2023-36025
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.8820
99th percentile

Priority of the 28 CVEs

Patch now 4 Urgent 4 High 16 Routine 4

Applies to

Product
Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H2 for 32-bit Systems
Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H2 for ARM64-based Systems
Microsoft Defender for Endpoint for Windows on Windows 10 Version 21H2 for x64-based Systems
Microsoft Defender for Endpoint for Windows on Windows 10 Version 22H2 for 32-bit Systems
Microsoft Defender for Endpoint for Windows on Windows 10 Version 22H2 for ARM64-based Systems
Microsoft Defender for Endpoint for Windows on Windows 10 Version 22H2 for x64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2023-36025 Windows SmartScreen Security Feature Bypass 8.8 0.8820 KEVDisclosedExploited
Patch now CVE-2023-36036 Windows Cloud Files Mini Filter Driver Elevation of Privilege 7.8 0.1667 KEVExploited
Patch now CVE-2023-36424 Windows Common Log File System Driver Elevation of Privilege 7.8 0.1209 KEVExploited
Patch now CVE-2023-36033 Windows DWM Core Library Elevation of Privilege 7.8 0.1095 KEVDisclosedExploited
Urgent CVE-2023-36017 Windows Scripting Remote Code Execution 8.8 0.2529 More likely
Urgent CVE-2023-36397 Windows Internet Connection Sharing (ICS) Remote Code Execution 9.8 0.1751 Exploitation Less Likely
Urgent CVE-2023-36394 Microsoft Windows Search Component Elevation of Privilege 7.0 0.0672 More likely
Urgent CVE-2023-36400 Windows HMAC Key Derivation Elevation of Privilege 8.8 0.0426 Exploitation Less Likely
High CVE-2023-38545 Windows cURL Implementation Remote Code Execution 9.8 0.7869 DisclosedN/A
High CVE-2023-38039 Windows cURL Implementation Denial of Service 7.5 0.5621 DisclosedNone reported
High CVE-2023-36028 Windows Protected EAP (PEAP) Remote Code Execution 9.8 0.0284 Exploitation Less Likely
High CVE-2023-36423 Microsoft Remote Registry Service Remote Code Execution 8.8 0.0199 Exploitation Less Likely
High CVE-2023-36401 Microsoft Remote Registry Service Remote Code Execution 7.2 0.0194 Exploitation Less Likely
High CVE-2023-36402 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0179 Exploitation Less Likely
High CVE-2023-36427 Windows Hyper-V Elevation of Privilege 7.0 0.0149 Exploitation Less Likely
High CVE-2023-36425 Windows Distributed File System (DFS) Remote Code Execution 8.0 0.0149 Exploitation Less Likely
High CVE-2023-36047 Windows Authentication Methods Elevation of Privilege 7.8 0.0111 Exploitation Less Likely
High CVE-2023-36393 Tablet Windows User Interface Remote Code Execution 7.8 0.0099 Exploitation Less Likely
High CVE-2023-36705 Windows Installer Elevation of Privilege 7.8 0.0068 Exploitation Less Likely
High CVE-2024-21315 Microsoft Defender for Endpoint Elevation of Privilege 7.8 0.0064 Exploitation Less Likely
High CVE-2023-36408 Windows Hyper-V Elevation of Privilege 7.8 0.0061 Exploitation Less Likely
High CVE-2023-36719 Microsoft Windows Speech Elevation of Privilege 7.8 0.0061 Exploitation Less Likely
High CVE-2023-36403 Windows Kernel Elevation of Privilege 7.0 0.0053 Exploitation Less Likely
High CVE-2023-36405 Windows Kernel Elevation of Privilege 7.0 0.0036 Exploitation Less Likely
Routine CVE-2023-24023 Microsoft Bluetooth Driver Spoofing 6.8 0.0129 Exploitation Less Likely
Showing 1 to 25 of 28 1Next