Patch Tuesday, October 2023
Microsoft's monthly security release, Tuesday, October 10, 2023. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
3 CVEs · 0 critical · 3 exploited · 1 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
3 CVEs · 0 critical · 3 exploited · 1 with public exploit code
- 5.3MediumOct 10, 2023Microsoft Skype for Business SSRFCVE-2023-41763Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation.Exploited91% likelyExploit codeNucleiDetection
- 6.5MediumOct 10, 2023Microsoft WordPad Information disclosureCVE-2023-36563Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure.Exploited20% likely
- 5.4MediumOct 10, 2023Microsoft WindowsCVE-2023-36584Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.Exploited3.3% likely
Adobe
No tracked Adobe CVEs in this window.
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.