[Zero-day] Microsoft release updates for 5 zero-days on November 2023's Patch Tuesday
Hello everyone!
Microsoft has published updates for a total of 63 vulnerabilities in this Patch Tuesday. Of the total, 5 of these have been classified as zero-days.
Here are the details of the zero days:
CVE ID | Description |
CVE-2023-36025 | Windows SmartScreen Security Feature Bypass Vulnerability |
CVE-2023-36033 | Windows DWM Core Library Elevation of Privilege Vulnerability |
CVE-2023-36036 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-36038 | ASP.NET Core Denial of Service Vulnerability |
CVE-2023-36413 | Microsoft Office Security Feature Bypass Vulnerability |
These patches can be deployed to your endpoints seamlessly, using one of the following methods:
Note: Kindly ensure that a Vulnerability DB sync has been initiated and completed successfully before proceeding.
Method 1:
a. On the console, navigate to Patches > Missing Patches and create a filter.
b. The criterion for the filter should be: CVE ID - equal - <CVE ID of the respective vulnerability> .
c. Once done, the missing patches in your network, corresponding to the particular CVE ID will be listed below.
Method 2:
a. Navigate to Patches > Top-Priority Patches .
b. Select the required patches via the Patch ID .
c. Click on Install/Publish Patches to deploy them.
Here is a list of the patch IDs corresponding to the vulnerabilities:
| Bulletin ID | Patch ID | Description |
| MS23-NOV3 | 37612 | 2023-11 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5032189) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37610 | 2023-11 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5032189) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37613 | 2023-11 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5032189) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37611 | 2023-11 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5032189) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37614 | 2023-11 Cumulative Update for Windows 11 for x64-based Systems (KB5032192) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37603 | 2023-11 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5032196) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37604 | 2023-11 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5032196) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37602 | 2023-11 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5032196) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37601 | 2023-11 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5032198) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37608 | 2023-11 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5032190) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37609 | 2023-11 Cumulative Update for Windows 11 Version 23H2 for x64-based Systems (KB5032190) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV2 | 37623 | 2023-11 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB5032248) (ESU) (CVE-2023-36036) (CVE-2023-36025) |
| MS23-NOV2 | 37622 | 2023-11 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB5032248) (ESU) (CVE-2023-36036) (CVE-2023-36025) |
| MS23-NOV2 | 37621 | 2023-11 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB5032250) (ESU) (CVE-2023-36036) (CVE-2023-36025) |
| MS23-NOV3 | 37612 | 2023-11 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5032189) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37610 | 2023-11 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5032189) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37613 | 2023-11 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5032189) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37611 | 2023-11 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5032189) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37614 | 2023-11 Cumulative Update for Windows 11 for x64-based Systems (KB5032192) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37603 | 2023-11 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5032196) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37604 | 2023-11 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5032196) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37602 | 2023-11 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5032196) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37618 | 2023-11 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5032197) (CVE-2023-36036) (CVE-2023-36025) |
| MS23-NOV3 | 37617 | 2023-11 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5032197) (CVE-2023-36036) (CVE-2023-36025) |
| MS23-NOV3 | 37616 | 2023-11 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5032197) (CVE-2023-36036) (CVE-2023-36025) |
| MS23-NOV3 | 37601 | 2023-11 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5032198) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37619 | 2023-11 Cumulative Update for Windows 10 Version 1507 for x64-based Systems (KB5032199) (CVE-2023-36036) (CVE-2023-36025) |
| MS23-NOV3 | 37620 | 2023-11 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB5032199) (CVE-2023-36036) (CVE-2023-36025) |
| MS23-NOV3 | 37608 | 2023-11 Cumulative Update for Windows 11 Version 22H2 for x64-based Systems (KB5032190) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV3 | 37609 | 2023-11 Cumulative Update for Windows 11 Version 23H2 for x64-based Systems (KB5032190) (CVE-2023-36036) (CVE-2023-36025) (CVE-2023-36033) |
| MS23-NOV6 | 37625 | 2023-11 Security Monthly Quality Rollup for Windows Server 2008 for x64-based Systems (KB5032254) (ESU) (CVE-2023-36036) (CVE-2023-36025) |
| MS23-NOV6 | 37626 | 2023-11 Security Monthly Quality Rollup for Windows Server 2008 for x86-based Systems (KB5032254) (ESU) (CVE-2023-36036) (CVE-2023-36025) |
| MS23-NOV6 | 37624 | 2023-11 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB5032252) (ESU) (CVE-2023-36036) (CVE-2023-36025) |
| MS23-NOV6 | 37628 | 2023-11 Security Monthly Quality Rollup for Windows Server 2012 for x64-based Systems (KB5032247) (ESU) (CVE-2023-36036) (CVE-2023-36025) |
| MS23-NOV6 | 37627 | 2023-11 Security Monthly Quality Rollup for Windows Server 2012 R2 for x64-based Systems (KB5032249) (ESU) (CVE-2023-36036) (CVE-2023-36025) |
| MS21-O2019R | 37731 | Update for Office 2019 for x64 2310 Retail Version (16924.20150) |
| MS21-O2019R | 37733 | Update for Office 2019 for x86 2310 Retail Version (16924.20150) |
| MS21-O2019V | 37727 | Update for Office 2019 for x64 1808 of volume version (10404.20013) |
| MS21-O2019V | 37729 | Update for Office 2019 for x86 1808 of volume version (10404.20013) |
| MS21-O2021R | 37739 | Update for Office 2021 for x64 2310 of Retail Version (16924.20150) |
| MS21-O2021R | 37741 | Update for Office 2021 for x86 2310 of Retail Version (16924.20150) |
| MS21-O2021V | 37735 | Update for Office 2021 for x64 2108 of volume version(14332.20604) |
| MS21-O2021V | 37737 | Update for Office 2021 for x86 2108 of volume version (14332.20604) |
| MS21-O365C | 37699 | Update for Microsoft 365 Apps for Business Current Channel for x64 2310 of version (16924.20150) |
| MS21-O365C | 37701 | Update for Microsoft 365 Apps for Business Current Channel for x86 2310 of version (16924.20150) |
| MS21-O365C | 37703 | Update for Microsoft 365 Apps for Enterprise Current Channel for x64 2310 of version (16924.20150) |
| MS21-O365C | 37705 | Update for Microsoft 365 Apps for Enterprise Current Channel for x86 2310 of version (16924.20150) |
| MS21-O365M | 37711 | Update for Microsoft 365 Apps for Business Monthly Enterprise Channel for x64 2309 of version (16827.20278) |
| MS21-O365M | 37713 | Update for Microsoft 365 Apps for Business Monthly Enterprise Channel for x86 version 2309 (16827.20278) |
| MS21-O365M | 37707 | Update for Microsoft 365 Apps for Monthly Enterprise Channel for x64 2309 of version (16827.20278) |
| MS21-O365M | 37709 | Update for Microsoft 365 Apps for Monthly Enterprise Channel for x86 version 2309 (16827.20278) |
| MS21-O365S | 37715 | Update for Microsoft 365 Apps for Business Semi Annual Channel for x64 2302 of version(16130.20846) |
| MS21-O365S | 37717 | Update for Microsoft 365 Apps for Business Semi Annual Channel for x86 2302 of version(16130.20846) |
| MS21-O365S | 37719 | Update for Microsoft 365 Apps for Enterprise Semi Annual Channel for x64 2302 of version(16130.20846) |
| MS21-O365S | 37721 | Update for Microsoft 365 Apps for Enterprise Semi Annual Channel for x86 2302 of version(16130.20846) |
| MS21-O365SP | 37723 | Update for Microsoft 365 Apps for Enterprise Semi Annual Preview Channel for x64 2308 of version(16731.20398) |
| MS21-O365SP | 37725 | Update for Microsoft 365 Apps for Enterprise Semi Annual Preview Channel for x86 2308 of version(16731.20398) |
| MS23-NOV7 | 37696 | Security Update for Microsoft Office 2016 (KB5002521) 64-Bit Edition |
| MS23-NOV7 | 37697 | Security Update for Microsoft Office 2016 (KB5002521) 32-Bit Edition |
*Patch details for CVE-2023-36038 will be added to the forum shortly.
Regards,
The ManageEngine Team