[Zero-day] Microsoft release updates for 1 zero-day on December 2023's Patch Tuesday
Hello everyone!
Microsoft has published updates for a total of 34 vulnerabilities in this Patch Tuesday. Of the total, 1 of these have been classified as zero-day.
Here are the details of the zero day:
CVE ID | Description |
CVE-2023-20588 | AMD Speculative Leaks Security Notice vulnerability |
These patches can be deployed to your endpoints seamlessly, using one of the following methods:
Note: Kindly ensure that a Vulnerability DB sync has been initiated and completed successfully before proceeding.
Method 1:
a. On the console, navigate to Patches > Missing Patches and create a filter.
b. The criterion for the filter should be: CVE ID - equal - <CVE ID of the respective vulnerability>.
c. Once done, the missing patches in your network, corresponding to the particular CVE ID will be listed below.
Method 2:
a. Navigate to Patches > Top-Priority Patches.
b. Select the required patches via the Patch ID.
c. Click on Install/Publish Patches to deploy them.
Here is a list of the patch IDs corresponding to the vulnerabilities:
| CVE ID | Patch ID | Bulletin ID | Description |
| CVE-2023-20588 | 37812 | MS23-DEC2 | 2023-12 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB5033427) (ESU) |
| CVE-2023-20588 | 37811 | MS23-DEC2 | 2023-12 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB5033427) (ESU) |
| CVE-2023-20588 | 37810 | MS23-DEC2 | 2023-12 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5033424) (ESU) |
| CVE-2023-20588 | 37818 | MS23-DEC3 | 2023-12 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5033118) |
| CVE-2023-20588 | 37836 | MS23-DEC3 | 2023-12 Cumulative Update for Windows 11 for x64-based Systems (KB5033369) |
| CVE-2023-20588 | 37825 | MS23-DEC3 | 2023-12 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5033371) |
| CVE-2023-20588 | 37824 | MS23-DEC3 | 2023-12 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5033371) |
| CVE-2023-20588 | 37826 | MS23-DEC3 | 2023-12 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5033371) |
| CVE-2023-20588 | 37827 | MS23-DEC3 | 2023-12 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5033372) |
| CVE-2023-20588 | 37830 | MS23-DEC3 | 2023-12 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5033372) |
| CVE-2023-20588 | 37828 | MS23-DEC3 | 2023-12 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5033372) |
| CVE-2023-20588 | 37829 | MS23-DEC3 | 2023-12 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5033372) |
| CVE-2023-20588 | 37823 | MS23-DEC3 | 2023-12 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5033373) |
| CVE-2023-20588 | 37821 | MS23-DEC3 | 2023-12 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5033373) |
| CVE-2023-20588 | 37822 | MS23-DEC3 | 2023-12 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5033373) |
| CVE-2023-20588 | 37820 | MS23-DEC3 | 2023-12 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB5033379) |
| CVE-2023-20588 | 37819 | MS23-DEC3 | 2023-12 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB5033379) |
| CVE-2023-20588 | 37834 | MS23-DEC3 | 2023-12 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5033375) |
| CVE-2023-20588 | 37831 | MS23-DEC3 | 2023-12 Cumulative Update for Windows 11 Version 23H2 for x64-based Systems (KB5033375) |
| CVE-2023-20588 | 37815 | MS23-DEC6 | 2023-12 Security Monthly Quality Rollup for Windows Server 2008 for x64-based Systems (KB5033422) (ESU) |
| CVE-2023-20588 | 37814 | MS23-DEC6 | 2023-12 Security Monthly Quality Rollup for Windows Server 2008 for x86-based Systems (KB5033422) (ESU) |
| CVE-2023-20588 | 37813 | MS23-DEC6 | 2023-12 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB5033433) (ESU) |
| CVE-2023-20588 | 37817 | MS23-DEC6 | 2023-12 Security Monthly Quality Rollup for Windows Server 2012 for x64-based Systems (KB5033429) (ESU) |
| CVE-2023-20588 | 37816 | MS23-DEC6 | 2023-12 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB5033420) (ESU) |
Regards,
The ManageEngine Team