Patch Tuesday, June 2023
Microsoft's monthly security release, Tuesday, June 13, 2023. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
2 CVEs · 1 critical · 2 exploited · 2 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
2 CVEs · 1 critical · 2 exploited · 2 with public exploit code
- 9.8CriticalJun 13, 2023Microsoft SharePoint Server Privilege escalationCVE-2023-29357Microsoft SharePoint Server is affected. An attacker gains elevated privileges and potentially control of the system. Patch SharePoint Server to the latest version, and ensure all dependencies are up to date.Exploited100% likelyExploit codeMetasploit · NucleiDetection
- 8.4HighJun 13, 2023Microsoft Streaming Service Memory corruptionCVE-2023-29360Microsoft Streaming Service contains an untrusted pointer dereference vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.Exploited22% likelyExploit code
Adobe
No tracked Adobe CVEs in this window.
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.