Microsoft Genel Zafiyet Güncellemeleri

Microsoft Genel Zafiyet Güncellemeleri

11 Temmuz 2023 tarihinde Microsoft aşağıda kaynak linkleri ve CVE kodları belirtilmiş olan zafiyetler ile ilgili raporlar yayınlamıştır.

Zafiyetler ile ilgili detaylar ve çözüm önerileri için ilgili linke tıklayınız.

Etkilenen Sistemler

Remote Procedure Call Runtime Remote Code Execution Vulnerability - CVE-2023-35300 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35300 https://nvd.nist.gov/vuln/detail/CVE-2023-35300

Windows Kernel Elevation of Privilege Vulnerability - CVE-2023-35305 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35305 https://nvd.nist.gov/vuln/detail/CVE-2023-35305

Windows Deployment Services Remote Code Execution Vulnerability - CVE-2023-35322 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35322 https://nvd.nist.gov/vuln/detail/CVE-2023-35322

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability - CVE-2023-35317 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35317 https://nvd.nist.gov/vuln/detail/CVE-2023-35317

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability - CVE-2023-35315 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35315 https://nvd.nist.gov/vuln/detail/CVE-2023-35315

Windows OCSP SnapIn Remote Code Execution Vulnerability - CVE-2023-35313 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35313 https://nvd.nist.gov/vuln/detail/CVE-2023-35313

Windows Common Log File System Driver Elevation of Privilege Vulnerability - CVE-2023-35299 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35299 https://nvd.nist.gov/vuln/detail/CVE-2023-35299

Windows Installer Elevation of Privilege Vulnerability - CVE-2023-32053 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32053 https://nvd.nist.gov/vuln/detail/CVE-2023-32053

Windows SmartScreen Security Feature Bypass Vulnerability - CVE-2023-32049 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32049 https://nvd.nist.gov/vuln/detail/CVE-2023-32049

Windows MSHTML Platform Elevation of Privilege Vulnerability - CVE-2023-32046 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32046 https://nvd.nist.gov/vuln/detail/CVE-2023-32046

Windows Win32k Elevation of Privilege Vulnerability - CVE-2023-21756 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21756 https://nvd.nist.gov/vuln/detail/CVE-2023-21756

Windows Netlogon Information Disclosure Vulnerability - CVE-2023-21526 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21526 https://nvd.nist.gov/vuln/detail/CVE-2023-21526

Windows Server Service Security Feature Bypass Vulnerability - CVE-2023-32022 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32022 https://nvd.nist.gov/vuln/detail/CVE-2023-32022

Windows RRAS Remote Code Execution Vulnerability - CVE-2023-35367 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35367 https://nvd.nist.gov/vuln/detail/CVE-2023-35367

Windows Error Reporting Service Elevation of Privilege Vulnerability - CVE-2023-36874 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36874 https://nvd.nist.gov/vuln/detail/CVE-2023-36874

Windows Active Directory Certificate Services Remote Code Execution Vulnerability - CVE-2023-35350 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35350 https://nvd.nist.gov/vuln/detail/CVE-2023-35350

Windows Geolocation Service Remote Code Execution Vulnerability - CVE-2023-35343 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35343 https://nvd.nist.gov/vuln/detail/CVE-2023-35343

Windows CryptoAPI Denial of Service Vulnerability - CVE-2023-35339 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35339 https://nvd.nist.gov/vuln/detail/CVE-2023-35339

Windows Peer Name Resolution Protocol Denial of Service Vulnerability - CVE-2023-35338 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35338 https://nvd.nist.gov/vuln/detail/CVE-2023-35338

Windows Extended Negotiation Denial of Service Vulnerability - CVE-2023-35330 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35330 https://nvd.nist.gov/vuln/detail/CVE-2023-35330

IoC’ler

-

Çözüm Önerileri

-

Tedbirler

-

CVE / CWE

CVE-2023-35300 / CVE-2023-35322 / CVE-2023-35317 / CVE-2023-35315 / CVE-2023-35313 / CVE-2023-35305 / CVE-2023-35299 / CVE-2023-32053 / CVE-2023-32049 / CVE-2023-32046 / CVE-2023-21756 / CVE-2023-21526 / CVE-2023-32022 / CVE-2023-35367 / CVE-2023-36874 / CVE-2023-35350 / CVE-2023-35343 / CVE-2023-35339 / CVE-2023-35338 / CVE-2023-35330

Ek Bilgiler

-

* CVSS 3.1 skoru (10 üzerinden) 7.0-8.9 olanlar “yüksek”, 9.0-10.0 olanlar “kritik” zafiyet olarak değerlendirilmektedir.