Microsoft June 2023 Patch Tuesday fixes 78 flaws, 38 RCE bugs

Microsoft June 2023 Patch Tuesday fixes 78 flaws, 38 RCE bugs

Tag CVE ID CVE Title Severity .NET and Visual Studio CVE-2023-24895 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Important .NET and Visual Studio CVE-2023-33126 .NET and Visual Studio Remote Code Execution Vulnerability Important .NET and Visual Studio CVE-2023-24936 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability Moderate .NET and Visual Studio CVE-2023-33135 .NET and Visual Studio Elevation of Privilege Vulnerability Important .NET and Visual Studio CVE-2023-32032 .NET and Visual Studio Elevation of Privilege Vulnerability Important .NET and Visual Studio CVE-2023-32030 .NET and Visual Studio Denial of Service Vulnerability Important .NET and Visual Studio CVE-2023-33128 .NET and Visual Studio Remote Code Execution Vulnerability Important .NET and Visual Studio CVE-2023-24897 .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability Critical .NET Core CVE-2023-29331 .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability Important .NET Framework CVE-2023-29326 .NET Framework Remote Code Execution Vulnerability Important ASP .NET CVE-2023-33141 Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability Important Azure DevOps CVE-2023-21569 Azure DevOps Server Spoofing Vulnerability Important Azure DevOps CVE-2023-21565 Azure DevOps Server Spoofing Vulnerability Important Microsoft Dynamics CVE-2023-24896 Dynamics 365 Finance Spoofing Vulnerability Important Microsoft Edge (Chromium-based) CVE-2023-2941 Chromium: CVE-2023-2941 Inappropriate implementation in Extensions API Unknown Microsoft Edge (Chromium-based) CVE-2023-33145 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Important Microsoft Edge (Chromium-based) CVE-2023-2937 Chromium: CVE-2023-2937 Inappropriate implementation in Picture In Picture Unknown Microsoft Edge (Chromium-based) CVE-2023-2936 Chromium: CVE-2023-2936 Type Confusion in V8 Unknown Microsoft Edge (Chromium-based) CVE-2023-2935 Chromium: CVE-2023-2935 Type Confusion in V8 Unknown Microsoft Edge (Chromium-based) CVE-2023-2940 Chromium: CVE-2023-2940 Inappropriate implementation in Downloads Unknown Microsoft Edge (Chromium-based) CVE-2023-2939 Chromium: CVE-2023-2939 Insufficient data validation in Installer Unknown Microsoft Edge (Chromium-based) CVE-2023-2938 Chromium: CVE-2023-2938 Inappropriate implementation in Picture In Picture Unknown Microsoft Edge (Chromium-based) CVE-2023-2931 Chromium: CVE-2023-2931 Use after free in PDF Unknown Microsoft Edge (Chromium-based) CVE-2023-2930 Chromium: CVE-2023-2930 Use after free in Extensions Unknown Microsoft Edge (Chromium-based) CVE-2023-2929 Chromium: CVE-2023-2929 Out of bounds write in Swiftshader Unknown Microsoft Edge (Chromium-based) CVE-2023-2934 Chromium: CVE-2023-2934 Out of bounds memory access in Mojo Unknown Microsoft Edge (Chromium-based) CVE-2023-2933 Chromium: CVE-2023-2933 Use after free in PDF Unknown Microsoft Edge (Chromium-based) CVE-2023-2932 Chromium: CVE-2023-2932 Use after free in PDF Unknown Microsoft Edge (Chromium-based) CVE-2023-3079 Chromium: CVE-2023-3079 Type Confusion in V8 Unknown Microsoft Edge (Chromium-based) CVE-2023-29345 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Low Microsoft Edge (Chromium-based) CVE-2023-33143 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Moderate Microsoft Exchange Server CVE-2023-32031 Microsoft Exchange Server Remote Code Execution Vulnerability Important Microsoft Exchange Server CVE-2023-28310 Microsoft Exchange Server Remote Code Execution Vulnerability Important Microsoft Office CVE-2023-33146 Microsoft Office Remote Code Execution Vulnerability Important Microsoft Office Excel CVE-2023-33133 Microsoft Excel Remote Code Execution Vulnerability Important Microsoft Office Excel CVE-2023-32029 Microsoft Excel Remote Code Execution Vulnerability Important Microsoft Office Excel CVE-2023-33137 Microsoft Excel Remote Code Execution Vulnerability Important Microsoft Office OneNote CVE-2023-33140 Microsoft OneNote Spoofing Vulnerability Important Microsoft Office Outlook CVE-2023-33131 Microsoft Outlook Remote Code Execution Vulnerability Important Microsoft Office SharePoint CVE-2023-33142 Microsoft SharePoint Server Elevation of Privilege Vulnerability Important Microsoft Office SharePoint CVE-2023-33129 Microsoft SharePoint Denial of Service Vulnerability Important Microsoft Office SharePoint CVE-2023-33130 Microsoft SharePoint Server Spoofing Vulnerability Important Microsoft Office SharePoint CVE-2023-33132 Microsoft SharePoint Server Spoofing Vulnerability Important Microsoft Office SharePoint CVE-2023-29357 Microsoft SharePoint Server Elevation of Privilege Vulnerability Critical Microsoft Power Apps CVE-2023-32024 Microsoft Power Apps Spoofing Vulnerability Important Microsoft Printer Drivers CVE-2023-32017 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability Important Microsoft WDAC OLE DB provider for SQL CVE-2023-29372 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Important Microsoft Windows Codecs Library CVE-2023-29370 Windows Media Remote Code Execution Vulnerability Important Microsoft Windows Codecs Library CVE-2023-29365 Windows Media Remote Code Execution Vulnerability Important NuGet Client CVE-2023-29337 NuGet Client Remote Code Execution Vulnerability Important Remote Desktop Client CVE-2023-29362 Remote Desktop Client Remote Code Execution Vulnerability Important Remote Desktop Client CVE-2023-29352 Windows Remote Desktop Security Feature Bypass Vulnerability Important Role: DNS Server CVE-2023-32020 Windows DNS Spoofing Vulnerability Important SysInternals CVE-2023-29353 Sysinternals Process Monitor for Windows Denial of Service Vulnerability Low Visual Studio CVE-2023-29007 GitHub: CVE-2023-29007 Arbitrary configuration injection via `git submodule deinit` Important Visual Studio CVE-2023-33139 Visual Studio Information Disclosure Vulnerability Important Visual Studio CVE-2023-25652 GitHub: CVE-2023-25652 “git apply –reject” partially-controlled arbitrary file write Important Visual Studio CVE-2023-25815 GitHub: CVE-2023-25815 Git looks for localized messages in an unprivileged place Important Visual Studio CVE-2023-27911 AutoDesk: CVE-2023-27911 Heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior Important Visual Studio CVE-2023-27910 AutoDesk: CVE-2023-27910 stack buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior Important Visual Studio CVE-2023-29011 GitHub: CVE-2023-29011 The config file of `connect.exe` is susceptible to malicious placing Important Visual Studio CVE-2023-29012 GitHub: CVE-2023-29012 Git CMD erroneously executes `doskey.exe` in current directory, if it exists Important Visual Studio CVE-2023-27909 AutoDesk: CVE-2023-27909 Out-Of-Bounds Write Vulnerability in Autodesk® FBX® SDK 2020 or prior Important Visual Studio Code CVE-2023-33144 Visual Studio Code Spoofing Vulnerability Important Windows Authentication Methods CVE-2023-29364 Windows Authentication Elevation of Privilege Vulnerability Important Windows Bus Filter Driver CVE-2023-32010 Windows Bus Filter Driver Elevation of Privilege Vulnerability Important Windows Cloud Files Mini Filter Driver CVE-2023-29361 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Important Windows Collaborative Translation Framework CVE-2023-32009 Windows Collaborative Translation Framework Elevation of Privilege Vulnerability Important Windows Container Manager Service CVE-2023-32012 Windows Container Manager Service Elevation of Privilege Vulnerability Important Windows CryptoAPI CVE-2023-24937 Windows CryptoAPI Denial of Service Vulnerability Important Windows CryptoAPI CVE-2023-24938 Windows CryptoAPI Denial of Service Vulnerability Important Windows DHCP Server CVE-2023-29355 DHCP Server Service Information Disclosure Vulnerability Important Windows Filtering CVE-2023-29368 Windows Filtering Platform Elevation of Privilege Vulnerability Important Windows GDI CVE-2023-29358 Windows GDI Elevation of Privilege Vulnerability Important Windows Geolocation Service CVE-2023-29366 Windows Geolocation Service Remote Code Execution Vulnerability Important Windows Group Policy CVE-2023-29351 Windows Group Policy Elevation of Privilege Vulnerability Important Windows Hello CVE-2023-32018 Windows Hello Remote Code Execution Vulnerability Important Windows Hyper-V CVE-2023-32013 Windows Hyper-V Denial of Service Vulnerability Critical Windows Installer CVE-2023-32016 Windows Installer Information Disclosure Vulnerability Important Windows iSCSI CVE-2023-32011 Windows iSCSI Discovery Service Denial of Service Vulnerability Important Windows Kernel CVE-2023-32019 Windows Kernel Information Disclosure Vulnerability Important Windows NTFS CVE-2023-29346 NTFS Elevation of Privilege Vulnerability Important Windows ODBC Driver CVE-2023-29373 Microsoft ODBC Driver Remote Code Execution Vulnerability Important Windows OLE CVE-2023-29367 iSCSI Target WMI Provider Remote Code Execution Vulnerability Important Windows PGM CVE-2023-29363 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Critical Windows PGM CVE-2023-32014 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Critical Windows PGM CVE-2023-32015 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Critical Windows Remote Procedure Call Runtime CVE-2023-29369 Remote Procedure Call Runtime Denial of Service Vulnerability Important Windows Resilient File System (ReFS) CVE-2023-32008 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability Important Windows Server Service CVE-2023-32022 Windows Server Service Security Feature Bypass Vulnerability Important Windows SMB CVE-2023-32021 Windows SMB Witness Service Security Feature Bypass Vulnerability Important Windows TPM Device Driver CVE-2023-29360 Windows TPM Device Driver Elevation of Privilege Vulnerability Important Windows Win32K CVE-2023-29371 Windows GDI Elevation of Privilege Vulnerability Important Windows Win32K CVE-2023-29359 GDI Elevation of Privilege Vulnerability Important

Source link

About Cybernoz

Security researcher and threat analyst with expertise in malware analysis and incident response.