Microsoft's security release of 11 July 2023
Patch Tuesday, July 2023, page 2
As of , CISA lists five of the 131 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2023-36874, Windows Error Reporting Service Elevation of Privilege.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 101 | CVE-2023-32041Windows Update Orchestrator Service Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 102 | CVE-2023-32085Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 103 | CVE-2023-33162Microsoft Excel Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 104 | CVE-2023-33174Windows Cryptographic Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 105 | CVE-2023-35306Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 106 | CVE-2023-35324Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 107 | CVE-2023-35326Windows CDP User Components Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 108 | CVE-2023-36872VP9 Video Extensions Information Disclosure | None | Not on CISA's list | 5.5 Medium | 0.01 |
| 109 | CVE-2023-32052Microsoft Power Apps (online) Spoofing | None | Not on CISA's list | 5.4 Medium | 0.01 |
| 110 | CVE-2023-35373Mono Authenticode Validation Spoofing | None | Not on CISA's list | 5.3 Medium | 0.01 |
| 111 | CVE-2023-33165Microsoft SharePoint Server Security Feature Bypass | None | Not on CISA's list | 4.3 Medium | 0.01 |
| 112 | CVE-2023-21756Windows Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 113 | CVE-2023-32053Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 114 | CVE-2023-33155Windows Cloud Files Mini Filter Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 115 | CVE-2023-35299Windows Common Log File System Driver Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 116 | CVE-2023-35304Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 117 | CVE-2023-35305Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 118 | CVE-2023-35312Microsoft VOLSNAP.SYS Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 119 | CVE-2023-35320Connected User Experiences and Telemetry Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 120 | CVE-2023-35328Windows Transaction Manager Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 121 | CVE-2023-35337Win32k Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 122 | CVE-2023-35340Windows CNG Key Isolation Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 123 | CVE-2023-35342Windows Image Acquisition Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 124 | CVE-2023-35362Windows Clip Service Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 125 | CVE-2023-35363Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.8 High | 0.00 |
| 126 | CVE-2023-33163Windows Network Load Balancing Remote Code Execution | None | Not on CISA's list | 7.5 High | 0.00 |
| 127 | CVE-2023-32050Windows Installer Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 128 | CVE-2023-35360Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 129 | CVE-2023-35361Windows Kernel Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 130 | CVE-2023-32055Active Template Library Elevation of Privilege | None | Not on CISA's list | 6.7 Medium | 0.00 |
| 131 | CVE-2023-33156Microsoft Defender Elevation of Privilege | None | Not on CISA's list | 6.3 Medium | 0.00 |