Patch Tuesday, November 2023
Microsoft's monthly security release, Tuesday, November 14, 2023. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
3 CVEs · 0 critical · 3 exploited · 1 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
3 CVEs · 0 critical · 3 exploited · 1 with public exploit code
- 8.8HighNov 14, 2023Microsoft WindowsCVE-2023-36025Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.Exploited88% likelyExploit codeDetection
- 7.8HighNov 14, 2023Microsoft Windows Memory corruptionCVE-2023-36033Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.Exploited11% likely
- 7.8HighNov 14, 2023Microsoft Windows Memory corruptionCVE-2023-36036Microsoft Windows Cloud Files Mini Filter Driver contains a privilege escalation vulnerability that could allow an attacker to gain SYSTEM privileges.Exploited17% likely
Adobe
No tracked Adobe CVEs in this window.
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.