Patch Tuesday, January 2013
Microsoft's monthly security release, Tuesday, January 8, 2013. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
0 CVEs · 0 critical · 0 exploited · 0 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
No tracked Microsoft CVEs in this window. Vendors sometimes publish a day or two later.
Adobe
3 CVEs · 1 critical · 3 exploited · 2 with public exploit code
- 9.8CriticalJan 9, 2013Adobe ColdFusion Auth bypass / access controlCVE-2013-0625Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.Exploited94% likelyExploit codeExploit-DB
- 7.5HighJan 9, 2013Adobe ColdFusion Privilege escalationCVE-2013-0629Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.Exploited66% likelyExploit codeExploit-DB
- 7.5HighJan 9, 2013Adobe ColdFusion Information disclosureCVE-2013-0631Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.Exploited66% likely
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.