Microsoft General Update Vulnerabilities

Microsoft General Update Vulnerabilities

On 11th of July, Microsoft has released a report for the following vulnerabilities.

Webpage hyperlinks and CVE codes can be found below for the relevant vulnerability. Please check the links below for more information, recommended solutions and mitigations.

Affected Systems

Remote Procedure Call Runtime Remote Code Execution Vulnerability - CVE-2023-35300 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35300 https://nvd.nist.gov/vuln/detail/CVE-2023-35300

Windows Kernel Elevation of Privilege Vulnerability - CVE-2023-35305 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35305 https://nvd.nist.gov/vuln/detail/CVE-2023-35305

Windows Deployment Services Remote Code Execution Vulnerability - CVE-2023-35322 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35322 https://nvd.nist.gov/vuln/detail/CVE-2023-35322

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability - CVE-2023-35317 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35317 https://nvd.nist.gov/vuln/detail/CVE-2023-35317

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability - CVE-2023-35315 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35315 https://nvd.nist.gov/vuln/detail/CVE-2023-35315

Windows OCSP SnapIn Remote Code Execution Vulnerability - CVE-2023-35313 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35313 https://nvd.nist.gov/vuln/detail/CVE-2023-35313

Windows Common Log File System Driver Elevation of Privilege Vulnerability - CVE-2023-35299 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35299 https://nvd.nist.gov/vuln/detail/CVE-2023-35299

Windows Installer Elevation of Privilege Vulnerability - CVE-2023-32053 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32053 https://nvd.nist.gov/vuln/detail/CVE-2023-32053

Windows SmartScreen Security Feature Bypass Vulnerability - CVE-2023-32049 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32049 https://nvd.nist.gov/vuln/detail/CVE-2023-32049

Windows MSHTML Platform Elevation of Privilege Vulnerability - CVE-2023-32046 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32046 https://nvd.nist.gov/vuln/detail/CVE-2023-32046

Windows Win32k Elevation of Privilege Vulnerability - CVE-2023-21756 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21756 https://nvd.nist.gov/vuln/detail/CVE-2023-21756

Windows Netlogon Information Disclosure Vulnerability - CVE-2023-21526 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21526 https://nvd.nist.gov/vuln/detail/CVE-2023-21526

Windows Server Service Security Feature Bypass Vulnerability - CVE-2023-32022 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32022 https://nvd.nist.gov/vuln/detail/CVE-2023-32022

Windows RRAS Remote Code Execution Vulnerability - CVE-2023-35367 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35367 https://nvd.nist.gov/vuln/detail/CVE-2023-35367

Windows Error Reporting Service Elevation of Privilege Vulnerability - CVE-2023-36874 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36874 https://nvd.nist.gov/vuln/detail/CVE-2023-36874

Windows Active Directory Certificate Services Remote Code Execution Vulnerability - CVE-2023-35350 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35350 https://nvd.nist.gov/vuln/detail/CVE-2023-35350

Windows Geolocation Service Remote Code Execution Vulnerability - CVE-2023-35343 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35343 https://nvd.nist.gov/vuln/detail/CVE-2023-35343

Windows CryptoAPI Denial of Service Vulnerability - CVE-2023-35339 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35339 https://nvd.nist.gov/vuln/detail/CVE-2023-35339

Windows Peer Name Resolution Protocol Denial of Service Vulnerability - CVE-2023-35338 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35338 https://nvd.nist.gov/vuln/detail/CVE-2023-35338

Windows Extended Negotiation Denial of Service Vulnerability - CVE-2023-35330 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35330 https://nvd.nist.gov/vuln/detail/CVE-2023-35330

IoC’s

-

Recommended Solution(s)

-

Mitigations

Please check the provided links for the each vulnerability.

CVE / CWE

CVE-2023-35300 / CVE-2023-35322 / CVE-2023-35317 / CVE-2023-35315 / CVE-2023-35313 / CVE-2023-35305 / CVE-2023-35299 / CVE-2023-32053 / CVE-2023-32049 / CVE-2023-32046 / CVE-2023-21756 / CVE-2023-21526 / CVE-2023-32022 / CVE-2023-35367 / CVE-2023-36874 / CVE-2023-35350 / CVE-2023-35343 / CVE-2023-35339 / CVE-2023-35338 / CVE-2023-35330

Related Website(s)

-

* Vulnerabilities with a CVSS 3.1 score between 7.0 and 8.9 are evaluated to be “high” whereas vulnerabilities with a CVSS 3.1 score between 9.0 and 10.0 are evaluated to be “critical”.