Microsoft's security release of 10 October 2023
Patch Tuesday, October 2023, page 2
As of , CISA lists three of the 103 CVEs Microsoft published on Patch Tuesday, , as exploited. Patch first: CVE-2023-41763, Skype for Business Elevation of Privilege.
| # | Vulnerability | CISA's SSVC exploitation | CISA's list | CVSS | EPSS |
|---|---|---|---|---|---|
| 101 | CVE-2023-36568Microsoft Office Click-To-Run Elevation of Privilege | None | Not on CISA's list | 7.0 High | 0.00 |
| 102 | CVE-2023-36721Windows Error Reporting Service Elevation of Privilege | Not assessed | Not on CISA's list | 7.0 High | 0.00 |
| 103 | CVE-2023-36698Windows Kernel Security Feature Bypass | None | Not on CISA's list | 4.4 Medium | 0.00 |