Microsoft · Security update · November 14, 2023
KB5032197: November 2023 cumulative update for Windows 10 1607
KB5032197, released November 14, 2023, fixes 26 CVEs across 12 products. 3 of them are being exploited (CVE-2023-36025); 3 on CISA KEV. Patch Radar priority: Patch now.
Patch now3 on CISA KEV1 publicly disclosed
CVEs closed
26
2 rated Critical
Exploited
3
CVE-2023-36025
Exploitation more likely
2
Vendor assessment
Highest EPSS
0.8820
99th percentile
Priority of the 26 CVEs
Patch now 3
Urgent 4
High 16
Routine 3
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2023-36025 | Windows SmartScreen | Security Feature Bypass | 8.8 | 0.8820 | KEVDisclosedExploited |
| Patch now | CVE-2023-36036 | Windows Cloud Files Mini Filter Driver | Elevation of Privilege | 7.8 | 0.1667 | KEVExploited |
| Patch now | CVE-2023-36424 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.1209 | KEVExploited |
| Urgent | CVE-2023-36017 | Windows Scripting | Remote Code Execution | 8.8 | 0.2529 | More likely |
| Urgent | CVE-2023-36397 | Windows Internet Connection Sharing (ICS) | Remote Code Execution | 9.8 | 0.1751 | Exploitation Less Likely |
| Urgent | CVE-2023-36394 | Microsoft Windows Search Component | Elevation of Privilege | 7.0 | 0.0672 | More likely |
| Urgent | CVE-2023-36400 | Windows HMAC Key Derivation | Elevation of Privilege | 8.8 | 0.0426 | Exploitation Less Likely |
| High | CVE-2023-36049 | .NET Framework | Elevation of Privilege | 9.8 | 0.0679 | Exploitation Less Likely |
| High | CVE-2023-36560 | ASP.NET | Security Feature Bypass | 8.8 | 0.0291 | Exploitation Less Likely |
| High | CVE-2023-36028 | Windows Protected EAP (PEAP) | Remote Code Execution | 9.8 | 0.0284 | Exploitation Less Likely |
| High | CVE-2023-36392 | Windows DHCP Server | Denial of Service | 7.5 | 0.0246 | Exploitation Less Likely |
| High | CVE-2023-36395 | Windows Deployment Services | Denial of Service | 7.5 | 0.0246 | Exploitation Less Likely |
| High | CVE-2023-36423 | Microsoft Remote Registry Service | Remote Code Execution | 8.8 | 0.0199 | Exploitation Less Likely |
| High | CVE-2023-36401 | Microsoft Remote Registry Service | Remote Code Execution | 7.2 | 0.0194 | Exploitation Less Likely |
| High | CVE-2023-36402 | Microsoft WDAC OLE DB provider for SQL | Remote Code Execution | 8.8 | 0.0179 | Exploitation Less Likely |
| High | CVE-2023-36425 | Windows Distributed File System (DFS) | Remote Code Execution | 8.0 | 0.0149 | Exploitation Less Likely |
| High | CVE-2023-36393 | Tablet Windows User Interface | Remote Code Execution | 7.8 | 0.0099 | Exploitation Less Likely |
| High | CVE-2023-36705 | Windows Installer | Elevation of Privilege | 7.8 | 0.0068 | Exploitation Less Likely |
| High | CVE-2024-21315 | Microsoft Defender for Endpoint | Elevation of Privilege | 7.8 | 0.0064 | Exploitation Less Likely |
| High | CVE-2023-36408 | Windows Hyper-V | Elevation of Privilege | 7.8 | 0.0061 | Exploitation Less Likely |
| High | CVE-2023-36719 | Microsoft Windows Speech | Elevation of Privilege | 7.8 | 0.0061 | Exploitation Less Likely |
| High | CVE-2023-36403 | Windows Kernel | Elevation of Privilege | 7.0 | 0.0053 | Exploitation Less Likely |
| High | CVE-2023-36405 | Windows Kernel | Elevation of Privilege | 7.0 | 0.0036 | Exploitation Less Likely |
| Routine | CVE-2023-36404 | Windows Kernel | Information Disclosure | 5.5 | 0.0076 | Exploitation Less Likely |
| Routine | CVE-2023-36398 | Windows NTFS | Information Disclosure | 6.5 | 0.0076 | Exploitation Less Likely |
Showing 1 to 25 of 26
1Next