Microsoft · Security update · December 12, 2023
KB5033427: December 2023 security update
KB5033427, released December 12, 2023, fixes 12 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.
Urgent1 publicly disclosedUnsupported product
CVEs closed
12
2 rated Critical
Exploited
0
None reported
Exploitation more likely
3
Vendor assessment
Highest EPSS
0.2386
97th percentile
Priority of the 12 CVEs
Patch now 0
Urgent 4
High 4
Routine 4
Applies to
CVEs this fix closes
| Priority | CVE | Component | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Urgent | CVE-2023-36005 | Windows Telephony Server | Elevation of Privilege | 7.5 | 0.2386 | More likely |
| Urgent | CVE-2023-35633 | Windows Kernel | Elevation of Privilege | 7.8 | 0.0870 | More likely |
| Urgent | CVE-2023-35641 | Windows Internet Connection Sharing (ICS) | Remote Code Execution | 8.8 | 0.0722 | More likely |
| Urgent | CVE-2023-35630 | Windows Internet Connection Sharing (ICS) | Remote Code Execution | 8.8 | 0.0613 | Exploitation Less Likely |
| High | CVE-2023-35639 | Windows ODBC Driver | Remote Code Execution | 8.8 | 0.0237 | Exploitation Less Likely |
| High | CVE-2023-36006 | Microsoft WDAC OLE DB provider for SQL | Remote Code Execution | 8.8 | 0.0189 | Exploitation Less Likely |
| High | CVE-2023-35622 | Microsoft Windows DNS | Spoofing | 7.5 | 0.0156 | Exploitation Less Likely |
| High | CVE-2023-36004 | Windows DPAPI (Data Protection Application Programming Interface) | Spoofing | 7.5 | 0.0137 | Exploitation Less Likely |
| Routine | CVE-2023-20588 | Chipsets | Information Disclosure | 5.5 | 0.1115 | DisclosedExploitation Less Likely |
| Routine | CVE-2023-36012 | Windows DHCP Server | Information Disclosure | 5.3 | 0.0200 | Exploitation Less Likely |
| Routine | CVE-2023-35642 | Windows Internet Connection Sharing (ICS) | Denial of Service | 6.5 | 0.0128 | Exploitation Less Likely |
| Routine | CVE-2023-35629 | Windows USB Mass Storage Class Driver | Remote Code Execution | 6.8 | 0.0086 | Exploitation Less Likely |
Showing 1 to 12 of 12
1