Microsoft's security release of 11 July 2023
Patch Tuesday, July 2023
As of , CISA lists five of the 131 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2023-36874, Windows Error Reporting Service Elevation of Privilege.
On CISA's list of exploited vulnerabilities
- CVE-2023-36874Windows Error Reporting Service Elevation of Privilege. Listed by CISA on 11 July 2023, release day
- CVE-2023-36884Windows Search Remote Code Execution. Listed by CISA on 17 July 2023, 6 days after the release
- CVE-2023-35311Microsoft Outlook Security Feature Bypass. Listed by CISA on 11 July 2023, release day
- CVE-2023-32046Windows MSHTML Platform Elevation of Privilege. Listed by CISA on 11 July 2023, release day
- CVE-2023-32049Windows SmartScreen Security Feature Bypass. Listed by CISA on 11 July 2023, release day
The release in numbers
| What | CVEs |
|---|---|
| CVE records Microsoft published | 131 CVEs |
| On CISA's list of exploited vulnerabilities | 5 CVEs |
| CISA's SSVC exploitation: active | 5 CVEs |
| CISA's SSVC exploitation: proof of concept | 1 CVE |
| CISA's SSVC exploitation: none | 121 CVEs |
| Not assessed by CISA's SSVC | 4 CVEs |
| Critical by CVSS (9.0 or more) | 5 CVEs |
| EPSS 0.10 or more | 5 CVEs |
Patch first: the release in our order
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 1 | CVE-2023-36874Windows Error Reporting Service Elevation of Privilege | Active | Patch this weekListed | 7.8 High | 0.43 |
| 2 | CVE-2023-36884Windows Search Remote Code Execution | Active | Patch this weekListed | 7.5 High | 0.99 |
| 3 | CVE-2023-35311Microsoft Outlook Security Feature Bypass | Active | Patch soonListed | 8.8 High | 0.16 |
| 4 | CVE-2023-32046Windows MSHTML Platform Elevation of Privilege | Active | Patch soonListed | 7.8 High | 0.10 |
| 5 | CVE-2023-32049Windows SmartScreen Security Feature Bypass | Active | Patch soonListed | 8.8 High | 0.04 |
| 6 | CVE-2023-33148Microsoft Office Elevation of Privilege | Proof of concept | Not on CISA's list | 7.8 High | 0.02 |
| 7 | CVE-2023-33157Microsoft SharePoint Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.38 |
| 8 | CVE-2023-33160Microsoft SharePoint Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.04 |
| 9 | CVE-2023-33134Microsoft SharePoint Server Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.03 |
| 10 | CVE-2023-33151Microsoft Outlook Spoofing | None | Not on CISA's list | 6.5 Medium | 0.03 |
| 11 | CVE-2023-32057Microsoft Message Queuing (MSMQ) Remote Code Execution | None | Not on CISA's list | 9.8 Critical | 0.02 |
| 12 | CVE-2023-35365Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 9.8 Critical | 0.02 |
| 13 | CVE-2023-35366Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 9.8 Critical | 0.02 |
| 14 | CVE-2023-35367Windows Routing and Remote Access Service (RRAS) Remote Code Execution | None | Not on CISA's list | 9.8 Critical | 0.02 |
| 15 | CVE-2023-33150Microsoft Office Security Feature Bypass | None | Not on CISA's list | 9.6 Critical | 0.02 |
| 16 | CVE-2023-29347Windows Admin Center Spoofing | None | Not on CISA's list | 8.7 High | 0.02 |
| 17 | CVE-2023-33127.NET and Visual Studio Elevation of Privilege | None | Not on CISA's list | 8.1 High | 0.02 |
| 18 | CVE-2023-33170ASP.NET and Visual Studio Security Feature Bypass | None | Not on CISA's list | 8.1 High | 0.02 |
| 19 | CVE-2023-35317Windows Server Update Service (WSUS) Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.02 |
| 20 | CVE-2023-32044Microsoft Message Queuing (MSMQ) Denial of Service | None | Not on CISA's list | 7.5 High | 0.02 |
| 21 | CVE-2023-32045Microsoft Message Queuing (MSMQ) Denial of Service | None | Not on CISA's list | 7.5 High | 0.02 |
| 22 | CVE-2023-32084HTTP.sys Denial of Service | None | Not on CISA's list | 7.5 High | 0.02 |
| 23 | CVE-2023-35298HTTP.sys Denial of Service | None | Not on CISA's list | 7.5 High | 0.02 |
| 24 | CVE-2023-35325Windows Print Spooler Information Disclosure | None | Not on CISA's list | 7.5 High | 0.02 |
| 25 | CVE-2023-35330Windows Extended Negotiation Denial of Service | None | Not on CISA's list | 7.5 High | 0.02 |
| 26 | CVE-2023-35338Windows Peer Name Resolution Protocol Denial of Service | None | Not on CISA's list | 7.5 High | 0.02 |
| 27 | CVE-2023-35339Windows CryptoAPI Denial of Service | None | Not on CISA's list | 7.5 High | 0.02 |
| 28 | CVE-2023-24881Microsoft Teams Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 29 | CVE-2023-32034Remote Procedure Call Runtime Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 30 | CVE-2023-32035Remote Procedure Call Runtime Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 31 | CVE-2023-32083Microsoft Failover Cluster Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 32 | CVE-2023-33164Remote Procedure Call Runtime Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 33 | CVE-2023-33166Remote Procedure Call Runtime Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 34 | CVE-2023-33167Remote Procedure Call Runtime Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 35 | CVE-2023-33168Remote Procedure Call Runtime Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 36 | CVE-2023-33169Remote Procedure Call Runtime Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 37 | CVE-2023-33172Remote Procedure Call Runtime Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 38 | CVE-2023-33173Remote Procedure Call Runtime Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 39 | CVE-2023-35296Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 40 | CVE-2023-35314Remote Procedure Call Runtime Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 41 | CVE-2023-35318Remote Procedure Call Runtime Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 42 | CVE-2023-35319Remote Procedure Call Runtime Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 43 | CVE-2023-35321Windows Deployment Services Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 44 | CVE-2023-35329Windows Authentication Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.02 |
| 45 | CVE-2023-32038Microsoft ODBC Driver Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 46 | CVE-2023-33159Microsoft SharePoint Server Spoofing | None | Not on CISA's list | 8.8 High | 0.01 |
| 47 | CVE-2023-35300Remote Procedure Call Runtime Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 48 | CVE-2023-35302Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 49 | CVE-2023-35303USB Audio Class System Driver Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 50 | CVE-2023-35315Windows Layer-2 Bridge Network Driver Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 51 | CVE-2023-35322Windows Deployment Services Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 52 | CVE-2023-35333MediaWiki PandocUpload Extension Remote Code Execution | None | Not on CISA's list | 8.8 High | 0.01 |
| 53 | CVE-2023-35364Windows Kernel Elevation of Privilege | None | Not on CISA's list | 8.8 High | 0.01 |
| 54 | CVE-2023-33171Microsoft Dynamics 365 (on-premises) Cross-site Scripting | None | Not on CISA's list | 8.2 High | 0.01 |
| 55 | CVE-2023-35335Microsoft Dynamics 365 (on-premises) Cross-site Scripting | None | Not on CISA's list | 8.2 High | 0.01 |
| 56 | CVE-2023-35297Windows Pragmatic General Multicast (PGM) Remote Code Execution | None | Not on CISA's list | 8.1 High | 0.01 |
| 57 | CVE-2023-32047Paint 3D Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 58 | CVE-2023-32051Raw Image Extension Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 59 | CVE-2023-32056Windows Server Update Service (WSUS) Elevation of Privilege | Not assessed | Not on CISA's list | 7.8 High | 0.01 |
| 60 | CVE-2023-33149Microsoft Office Graphics Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 61 | CVE-2023-33154Windows Partition Management Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 62 | CVE-2023-33158Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 63 | CVE-2023-33161Microsoft Excel Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 64 | CVE-2023-35313Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 65 | CVE-2023-35323Windows OLE Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 66 | CVE-2023-35343Windows Geolocation Service Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 67 | CVE-2023-35353Connected User Experiences and Telemetry Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 68 | CVE-2023-35356Windows Kernel Elevation of Privilege | Not assessed | Not on CISA's list | 7.8 High | 0.01 |
| 69 | CVE-2023-35357Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 70 | CVE-2023-35358Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.01 |
| 71 | CVE-2023-35374Paint 3D Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 72 | CVE-2023-36867Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution | None | Not on CISA's list | 7.8 High | 0.01 |
| 73 | CVE-2023-35309Microsoft Message Queuing (MSMQ) Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.01 |
| 74 | CVE-2023-35352Windows Remote Desktop Security Feature Bypass | None | Not on CISA's list | 7.5 High | 0.01 |
| 75 | CVE-2023-21526Windows Netlogon Information Disclosure | Not assessed | Not on CISA's list | 7.4 High | 0.01 |
| 76 | CVE-2023-32054Volume Shadow Copy Elevation of Privilege | None | Not on CISA's list | 7.3 High | 0.01 |
| 77 | CVE-2023-35350Windows Active Directory Certificate Services (AD CS) Remote Code Execution | None | Not on CISA's list | 7.2 High | 0.01 |
| 78 | CVE-2023-35347Microsoft Install Service Elevation of Privilege | None | Not on CISA's list | 7.1 High | 0.01 |
| 79 | CVE-2023-33152Microsoft ActiveX Remote Code Execution | None | Not on CISA's list | 7.0 High | 0.01 |
| 80 | CVE-2023-32043Windows Remote Desktop Security Feature Bypass | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 81 | CVE-2023-33153Microsoft Outlook Remote Code Execution | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 82 | CVE-2023-35332Windows Remote Desktop Protocol Security Feature Bypass | None | Not on CISA's list | 6.8 Medium | 0.01 |
| 83 | CVE-2023-32033Microsoft Failover Cluster Remote Code Execution | None | Not on CISA's list | 6.6 Medium | 0.01 |
| 84 | CVE-2023-35310Windows DNS Server Remote Code Execution | None | Not on CISA's list | 6.6 Medium | 0.01 |
| 85 | CVE-2023-35344Windows DNS Server Remote Code Execution | None | Not on CISA's list | 6.6 Medium | 0.01 |
| 86 | CVE-2023-35345Windows DNS Server Remote Code Execution | None | Not on CISA's list | 6.6 Medium | 0.01 |
| 87 | CVE-2023-35346Windows DNS Server Remote Code Execution | None | Not on CISA's list | 6.6 Medium | 0.01 |
| 88 | CVE-2023-35351Windows Active Directory Certificate Services (AD CS) Remote Code Execution | None | Not on CISA's list | 6.6 Medium | 0.01 |
| 89 | CVE-2023-32037Windows Layer-2 Bridge Network Driver Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 90 | CVE-2023-32042OLE Automation Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 91 | CVE-2023-35308Windows MSHTML Platform Security Feature Bypass | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 92 | CVE-2023-35316Remote Procedure Call Runtime Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 93 | CVE-2023-35331Windows Local Security Authority (LSA) Denial of Service | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 94 | CVE-2023-35336Windows MSHTML Platform Security Feature Bypass | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 95 | CVE-2023-35348Active Directory Federation Service Security Feature Bypass | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 96 | CVE-2023-36868Azure Service Fabric on Windows Information Disclosure | None | Not on CISA's list | 6.5 Medium | 0.01 |
| 97 | CVE-2023-36871Azure Active Directory Security Feature Bypass | Not assessed | Not on CISA's list | 6.5 Medium | 0.01 |
| 98 | CVE-2023-35341Microsoft DirectMusic Information Disclosure | None | Not on CISA's list | 6.2 Medium | 0.01 |
| 99 | CVE-2023-32039Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 100 | CVE-2023-32040Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
By impact
What this page counts
The CVE records Microsoft published as a CVE Numbering Authority on 11 July 2023, the second Tuesday of the month. Microsoft's own release notes can also name CVEs other organisations assigned, such as Chromium's for Edge; those are not counted here.
Titles, CVSS scores and impact words are Microsoft's, from the CVE records. The list of exploited vulnerabilities and the SSVC values are CISA's. EPSS is FIRST's daily score. The order is ours: entries on CISA's list first, in our patch-first order, then CISA's SSVC exploitation value, then EPSS, then CVSS.