Microsoft · Security update · November 14, 2023

KB5032190: November 2023 cumulative update for Windows 11 22H2

KB5032190, released November 14, 2023, fixes 32 CVEs across 8 products. 4 of them are being exploited (CVE-2023-36025); 4 on CISA KEV. Patch Radar priority: Patch now.

Patch now4 on CISA KEV4 publicly disclosed
CVEs closed
32
2 rated Critical
Exploited
4
CVE-2023-36025
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.8820
99th percentile

Priority of the 32 CVEs

Patch now 4 Urgent 4 High 19 Routine 5

Applies to

Product
Microsoft Defender for Endpoint for Windows on Windows 11 Version 22H2 for ARM64-based Systems
Microsoft Defender for Endpoint for Windows on Windows 11 Version 22H2 for x64-based Systems
Microsoft Defender for Endpoint for Windows on Windows 11 Version 23H2 for ARM64-based Systems
Microsoft Defender for Endpoint for Windows on Windows 11 Version 23H2 for x64-based Systems
Windows 11 Version 22H2 for ARM64-based Systems
Windows 11 Version 22H2 for x64-based Systems
Windows 11 Version 23H2 for ARM64-based Systems
Windows 11 Version 23H2 for x64-based Systems

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2023-36025 Windows SmartScreen Security Feature Bypass 8.8 0.8820 KEVDisclosedExploited
Patch now CVE-2023-36036 Windows Cloud Files Mini Filter Driver Elevation of Privilege 7.8 0.1667 KEVExploited
Patch now CVE-2023-36424 Windows Common Log File System Driver Elevation of Privilege 7.8 0.1209 KEVExploited
Patch now CVE-2023-36033 Windows DWM Core Library Elevation of Privilege 7.8 0.1095 KEVDisclosedExploited
Urgent CVE-2023-36017 Windows Scripting Remote Code Execution 8.8 0.2529 More likely
Urgent CVE-2023-36397 Windows Internet Connection Sharing (ICS) Remote Code Execution 9.8 0.1751 Exploitation Less Likely
Urgent CVE-2023-36399 Windows Storage Elevation of Privilege 7.1 0.0834 More likely
Urgent CVE-2023-36400 Windows HMAC Key Derivation Elevation of Privilege 8.8 0.0426 Exploitation Less Likely
High CVE-2023-38545 Windows cURL Implementation Remote Code Execution 9.8 0.7869 DisclosedN/A
High CVE-2023-38039 Windows cURL Implementation Denial of Service 7.5 0.5621 DisclosedNone reported
High CVE-2023-36028 Windows Protected EAP (PEAP) Remote Code Execution 9.8 0.0284 Exploitation Less Likely
High CVE-2023-36423 Microsoft Remote Registry Service Remote Code Execution 8.8 0.0199 Exploitation Less Likely
High CVE-2023-36401 Microsoft Remote Registry Service Remote Code Execution 7.2 0.0194 Exploitation Less Likely
High CVE-2023-36402 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0179 Exploitation Less Likely
High CVE-2023-36407 Windows Hyper-V Elevation of Privilege 7.8 0.0173 Exploitation Less Likely
High CVE-2023-36396 Windows Compressed Folder Remote Code Execution 7.8 0.0167 Exploitation Less Likely
High CVE-2023-36427 Windows Hyper-V Elevation of Privilege 7.0 0.0149 Exploitation Less Likely
High CVE-2023-36425 Windows Distributed File System (DFS) Remote Code Execution 8.0 0.0149 Exploitation Less Likely
High CVE-2023-36047 Windows Authentication Methods Elevation of Privilege 7.8 0.0111 Exploitation Less Likely
High CVE-2023-36393 Tablet Windows User Interface Remote Code Execution 7.8 0.0099 Exploitation Less Likely
High CVE-2023-36046 Windows Authentication Methods Denial of Service 7.1 0.0069 Exploitation Less Likely
High CVE-2023-36705 Windows Installer Elevation of Privilege 7.8 0.0068 Exploitation Less Likely
High CVE-2024-21315 Microsoft Defender for Endpoint Elevation of Privilege 7.8 0.0064 Exploitation Less Likely
High CVE-2023-36408 Windows Hyper-V Elevation of Privilege 7.8 0.0061 Exploitation Less Likely
High CVE-2023-36719 Microsoft Windows Speech Elevation of Privilege 7.8 0.0061 Exploitation Less Likely
Showing 1 to 25 of 32 1Next