Microsoft November 2023 Patch – 5 zero-days, 58 flaws
Last updated:
Microsoft has released its November 2023 Patch Tuesday updates, addressing a total of 58 flaws, including five zero-day vulnerabilities. Among these, 14 remote code execution bugs were fixed, with only one rated as critical.
The critical flaws resolved in this release encompass an Azure information disclosure bug, a remote code execution issue in Windows Internet Connection Sharing (ICS), and a Hyper-V escape flaw allowing the execution of programs on the host with SYSTEM privileges.
The breakdown of vulnerabilities is as follows:
- 16 Elevation of Privilege Vulnerabilities
- 6 Security Feature Bypass Vulnerabilities
- 15 Remote Code Execution Vulnerabilities
- 6 Information Disclosure Vulnerabilities
- 5 Denial of Service Vulnerabilities
- 11 Spoofing Vulnerabilities
It’s important to note that the total count of 58 flaws excludes 5 Mariner security updates and 20 Microsoft Edge security updates released earlier this month. Stay informed and consider updating your systems to enhance security and protect against potential vulnerabilities.
Request an IT assessment
Tell us a little about your business and a PDX IT team member will follow up to schedule an assessment. Prefer to talk? Call 971-331-4871.
Modern ransomware gangs don’t just lock your files. They copy your data first, then threaten to publish or sell it on the dark web. Here is how double extortion works and what Portland-area small businesses can do before, during and after an attack.
Portland small business mobile security checklist: lock phones, avoid risky public Wi-Fi, secure office wireless, spot text scams and handle lost phones.
Portland employee offboarding IT checklist: lock Microsoft 365, save the mailbox and OneDrive files, change shared passwords and wipe company devices.
