vulnerability management

Today’s VERT Alert addresses Microsoft’s August 2023 Security Updates, which includes a recently introduced release notes format. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-1068 on Wednesday, August 9th. In-The-Wild & Disclosed CVEs CVE-2023-38180 A vulnerability in Kestrel could allow for a denial of service. Kestrel is the cross-platform web server that is included with (and enabled by default in) ASP.NET Core. When detecting a potentially malicious client, Kestrel…

Tag CVE Count CVEs Windows Image Acquisition 1 CVE-2023-35342 Windows Netlogon 1 CVE-2023-21526 Microsoft Power Apps 1 CVE-2023-32052 Windows Remote Desktop 3 CVE-2023-32043, CVE-2023-35332, CVE-2023-35352 Windows Error Reporting 1 CVE-2023-36874 Windows PGM 1 CVE-2023-35297 Windows CryptoAPI 1 CVE-2023-35339 Windows Cryptographic Services 1 CVE-2023-33174 Windows Installer 2 CVE-2023-32050, CVE-2023-32053 Windows CDP User Components 1 CVE-2023-35326 Windows Transaction Manager 1 CVE-2023-35328 Windows Admin Center 1 CVE-2023-29347 Windows Authentication Methods 1 CVE-2023-35329 Windows Server Update Service 2 CVE-2023-35317,…

Tag CVE Count CVEs Windows Installer 1 CVE-2023-32016 Windows Hyper-V 1 CVE-2023-32013 Microsoft Power Apps 1 CVE-2023-32024 Windows Group Policy 1 CVE-2023-29351 Remote Desktop Client 2 CVE-2023-29352, CVE-2023-29362 Visual Studio 9 CVE-2023-33139, CVE-2023-29012, CVE-2023-29011, CVE-2023-25815, CVE-2023-29007, CVE-2023-25652, CVE-2023-27909, CVE-2023-27910, CVE-2023-27911 Microsoft Dynamics 1 CVE-2023-24896 Microsoft Office Outlook 1 CVE-2023-33131 Windows Hello 1 CVE-2023-32018 Windows Collaborative Translation Framework 1 CVE-2023-32009 Microsoft Office SharePoint 5 CVE-2023-29357, CVE-2023-33129, CVE-2023-33130, CVE-2023-33132, CVE-2023-33142 Windows PGM 3 CVE-2023-29363, CVE-2023-32014, CVE-2023-32015 Microsoft…

Today’s VERT Alert addresses Microsoft’s May 2023 Security Updates, which include a new release notes format. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-1055 on Wednesday, May 10th. In-The-Wild & Disclosed CVEs CVE-2023-29336 Up first this month is a vulnerability reported by Avast in Win32k. This vulnerability could allow an authenticated attacker to elevate their privileges to SYSTEM. This vulnerability has seen active exploitation. CVE-2023-24932 This vulnerability allows an…

Tag CVE Count CVEs Microsoft PostScript Printer Driver 1 CVE-2023-28243 Windows RPC API 3 CVE-2023-21727, CVE-2023-21729, CVE-2023-28297 Windows Secure Socket Tunneling Protocol (SSTP) 1 CVE-2023-28241 Windows Error Reporting 1 CVE-2023-28221 Microsoft Office Word 1 CVE-2023-28311 Windows Transport Security Layer (TLS) 1 CVE-2023-28234 Microsoft Printer Drivers 11 CVE-2023-24924, CVE-2023-24883, CVE-2023-24925, CVE-2023-24884, CVE-2023-24926, CVE-2023-24885, CVE-2023-24927, CVE-2023-24886, CVE-2023-24928, CVE-2023-24887, CVE-2023-24929 Windows Group Policy 1 CVE-2023-28276 Azure Machine Learning 1 CVE-2023-28312 Windows Netlogon 1 CVE-2023-28268 Microsoft Dynamics 2 CVE-2023-28309,…

Tag CVE Count CVEs Windows HTTP Protocol Stack 1 CVE-2023-23392 Microsoft PostScript Printer Driver 18 CVE-2023-24856, CVE-2023-23406, CVE-2023-23413, CVE-2023-24857, CVE-2023-24858, CVE-2023-24863, CVE-2023-24864, CVE-2023-24866, CVE-2023-24906, CVE-2023-24867, CVE-2023-24907, CVE-2023-24868, CVE-2023-24909, CVE-2023-24870, CVE-2023-24911, CVE-2023-24872, CVE-2023-24913, CVE-2023-24876 Internet Control Message Protocol (ICMP) 1 CVE-2023-23415 Windows Cryptographic Services 1 CVE-2023-23416 Visual Studio 4 CVE-2023-22490, CVE-2023-23946, CVE-2023-22743, CVE-2023-23618 Microsoft Dynamics 6 CVE-2023-24919, CVE-2023-24879, CVE-2023-24920, CVE-2023-24921, CVE-2023-24922, CVE-2023-24891 Windows TPM 2 CVE-2023-1017, CVE-2023-1018 Microsoft Office SharePoint 1 CVE-2023-23395 Remote Access Service Point-to-Point…