Microsoft · Security update · November 14, 2023
KB5032254: November 2023 security update
KB5032254, released November 14, 2023, fixes 14 CVEs across 4 products. 3 of them are being exploited (CVE-2023-36025); 3 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.
Patch now3 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
14
1 rated Critical
Exploited
3
CVE-2023-36025
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8820
99th percentile
Priority of the 14 CVEs
Patch now 3
Urgent 1
High 9
Routine 1
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2023-36025 | Windows SmartScreen | Security Feature Bypass | 8.8 | 0.8820 | KEVDisclosedExploited |
| Patch now | CVE-2023-36036 | Windows Cloud Files Mini Filter Driver | Elevation of Privilege | 7.8 | 0.1667 | KEVExploited |
| Patch now | CVE-2023-36424 | Windows Common Log File System Driver | Elevation of Privilege | 7.8 | 0.1209 | KEVExploited |
| Urgent | CVE-2023-36397 | Windows Internet Connection Sharing (ICS) | Remote Code Execution | 9.8 | 0.1751 | Exploitation Less Likely |
| High | CVE-2023-36395 | Windows Deployment Services | Denial of Service | 7.5 | 0.0246 | Exploitation Less Likely |
| High | CVE-2023-36423 | Microsoft Remote Registry Service | Remote Code Execution | 8.8 | 0.0199 | Exploitation Less Likely |
| High | CVE-2023-36401 | Microsoft Remote Registry Service | Remote Code Execution | 7.2 | 0.0194 | Exploitation Less Likely |
| High | CVE-2023-36402 | Microsoft WDAC OLE DB provider for SQL | Remote Code Execution | 8.8 | 0.0179 | Exploitation Less Likely |
| High | CVE-2023-36425 | Windows Distributed File System (DFS) | Remote Code Execution | 8.0 | 0.0149 | Exploitation Less Likely |
| High | CVE-2023-36393 | Tablet Windows User Interface | Remote Code Execution | 7.8 | 0.0099 | Exploitation Less Likely |
| High | CVE-2023-36705 | Windows Installer | Elevation of Privilege | 7.8 | 0.0068 | Exploitation Less Likely |
| High | CVE-2023-36719 | Microsoft Windows Speech | Elevation of Privilege | 7.8 | 0.0061 | Exploitation Less Likely |
| High | CVE-2023-36403 | Windows Kernel | Elevation of Privilege | 7.0 | 0.0053 | Exploitation Less Likely |
| Routine | CVE-2023-36428 | Windows Authentication Methods | Information Disclosure | 5.5 | 0.0075 | Exploitation Less Likely |
Showing 1 to 14 of 14
1