Microsoft Releases Updates to Patch Critical Flaws in Windows and Other Software

Microsoft has rolled out fixes for its Windows working technique and other application elements to remediate main security shortcomings as portion of Patch Tuesday updates for June 2023.

Of the 73 flaws, 6 are rated Critical, 63 are rated Significant, two are rated Moderated, and one is rated Minimal in severity. This also incorporates three issues the tech big tackled in its Chromium-based mostly Edge browser.

It really is well worth noting that Microsoft also closed out 26 other flaws in Edge – all of them rooted in Chromium itself – considering that the release of Could Patch Tuesday updates. This includes CVE-2023-3079, a zero-day bug that Google disclosed as staying actively exploited in the wild last week.

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

The June 2023 updates also mark the 1st time in numerous months that doesn’t aspect any zero-day flaw in Microsoft products and solutions that is publicly recognized or below lively attack at the time of launch.

Topping the checklist of fixes is CVE-2023-29357 (CVSS score: 9.8), a privilege escalation flaw in SharePoint Server that could be exploited by an attacker to obtain administrator privileges.

“An attacker who has obtained accessibility to spoofed JWT authentication tokens can use them to execute a network attack which bypasses authentication and permits them to gain accessibility to the privileges of an authenticated consumer,” Microsoft claimed. “The attacker requirements no privileges nor does the consumer will need to carry out any motion.”

Also patched by Redmond are a few critical remote code execution bugs (CVE-2023-29363, CVE-2023-32014, and CVE-2023-32015, CVSS scores: 9.8) in Windows Pragmatic General Multicast (PGM) that could be weaponized to “reach remote code execution and try to set off malicious code.”

Microsoft beforehand tackled a very similar flaw in the exact part (CVE-2023-28250, CVSS score: 9.8), a protocol designed to deliver packets among a number of network associates in a trusted fashion, in April 2023.

Forthcoming WEBINAR🔐 Mastering API Security: Understanding Your Genuine Attack Surface area

Learn the untapped vulnerabilities in your API ecosystem and choose proactive techniques towards ironclad security. Be part of our insightful webinar!

Be a part of the Session.wn-button,.wn-label,.wn-label:just afterdisplay screen:inline-block.check_two_webinarmargin:20px 10px 30px 0background:#f9fbffcolor:#160755padding: 5%border:2px good #d9deffborder-radius:10pxtext-align:leftbox-shadow:10px 10px #e2ebff-webkit-border-major-still left-radius:25px-moz-border-radius-topleft:25px-webkit-border-bottom-right-radius:25px-moz-border-radius-bottomright:25px.wn-labelfont-measurement:13pxmargin:20px 0font-body weight:600letter-spacing:.6pxcolor:#596cec.wn-label:afterwidth:50pxheight:6pxcontent:”border-prime:2px reliable #d9deffmargin: 8px.wn-titlefont-dimension:21pxpadding:10px 0font-body weight:900text-align:leftline-peak:33px.wn-descriptiontextual content-align:leftfont-size:15.6pxline-height:26pxmargin:5px !importantcolor:#4e6a8d.wn-buttonpadding:6px 12pxborder-radius:5pxbackground-coloration:#4469f5font-measurement:15pxcolor:#fff!importantborder:0line-top:inherittext-decoration:none!importantcursor:pointermargin:15px 20pxfloat:leftfont-body weight:500letter-spacing:.2px

Also fixed by the tech giant are two distant code execution bugs impacting Trade Server (CVE-2023-28310 and CVE-2023-32031) that could allow an authenticated attacker to realize distant code execution on influenced installations.

Application Patches from Other Suppliers

In addition to Microsoft, security updates have also been launched by other distributors above the previous several months to rectify various vulnerabilities, such as —

• Adobe
• Android
• Arm
• Cisco
• Citrix
• Dell
• Drupal
• F5
• Fortinet
• GitLab
• Google Chrome
• Hitachi Power
• HP
• IBM
• Lenovo
• Linux distributions Debian, Oracle Linux, Purple Hat, SUSE, and Ubuntu
• MediaTek
• Mitsubishi Electric
• MOVEit Transfer
• Mozilla Firefox, Firefox ESR, and Thunderbird
• NETGEAR
• Qualcomm
• Samsung
• SAP
• Schneider Electrical
• Siemens
• Splunk
• Synology
• Craze Micro
• Veritas
• VMware
• WordPress
• Zoom, and
• Zyxel

Observed this article attention-grabbing? Observe us on Twitter  and LinkedIn to read through additional unique content material we write-up.