Como cada segundo martes de mes, Microsoft ha publicado su boletín de parches con todas las nuevas vulnerabilidades detectadas. Para esta entrega se han reunido un total de 105 vulnerabilidades, distribuidas ente las siguientes categorías de riesgo:

• Número de vulnerabilidades críticas: 2
• Número de vulnerabilidades altas: 81
• Número de vulnerabilidades medias: 19
• Número de vulnerabilidades bajas: 1
• Número de vulnerabilidades zero days:

CVE-2023-36720, CVE-2023-36724, CVE-2023-36725, CVE-2023-36431, CVE-2023-36434, CVE-2023-36433, CVE-2023-36557, CVE-2023-36778, CVE-2023-36436, CVE-2023-36576, CVE-2023-36598, CVE-2023-36602, CVE-2023-36438, CVE-2023-36563, CVE-2023-36722, CVE-2023-36569, CVE-2023-36570, CVE-2023-36731, CVE-2023-36732, CVE-2023-36566, CVE-2023-41763, CVE-2023-36414, CVE-2023-36561, CVE-2023-36780, CVE-2023-36420, CVE-2023-36568, CVE-2023-36721, CVE-2023-36417, CVE-2023-38171, CVE-2023-36418, CVE-2023-36419, CVE-2023-36730, CVE-2023-36429, CVE-2023-36717, CVE-2023-36718, CVE-2023-36726, CVE-2023-36737, CVE-2023-36415, CVE-2023-36416, CVE-2023-36723, CVE-2023-36728, CVE-2023-41773, CVE-2023-41772, CVE-2023-41771, CVE-2023-41770, CVE-2023-41768, CVE-2023-41767, CVE-2023-36743, CVE-2023-36776, CVE-2023-36790, CVE-2023-38166, CVE-2023-36435, CVE-2023-36902, CVE-2023-35349, CVE-2023-36785, CVE-2023-36564, CVE-2023-36565, CVE-2023-36567, CVE-2023-36571, CVE-2023-36572, CVE-2023-36573, CVE-2023-36574, CVE-2023-36575, CVE-2023-36577, CVE-2023-36578, CVE-2023-36579, CVE-2023-36581, CVE-2023-36582, CVE-2023-36583, CVE-2023-36584, CVE-2023-36585, CVE-2023-36589, CVE-2023-36590, CVE-2023-36591, CVE-2023-36592, CVE-2023-36593, CVE-2023-36594, CVE-2023-36596, CVE-2023-36603, CVE-2023-36605, CVE-2023-36606, CVE-2023-36697, CVE-2023-36698, CVE-2023-36701, CVE-2023-36702, CVE-2023-36703, CVE-2023-36704, CVE-2023-36706, CVE-2023-41765, CVE-2023-36789, CVE-2023-36786, CVE-2023-38159, CVE-2023-29348, CVE-2023-5346.

• Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
• Windows Server 2008 R2 for x64-based Systems Service Pack 1
• Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
• Windows Server 2012
• Windows Server 2012 (Server Core installation)
• Windows Server 2012 R2
• Windows Server 2012 R2 (Server Core installation)
• Windows 10 for 32-bit Systems
• Windows 10 for x64-based Systems
• Windows Server 2016
• Windows 10 Version 1607 for 32-bit Systems
• Windows 10 Version 1607 for x64-based Systems
• Windows Server 2016 (Server Core installation)
• Microsoft SQL Server 2017 for x64-based Systems (GDR)
• Windows 10 Version 1809 for 32-bit Systems
• Windows 10 Version 1809 for x64-based Systems
• Windows 10 Version 1809 for ARM64-based Systems
• Windows Server 2019
• Windows Server 2019 (Server Core installation)
• Microsoft Office 2019 for 32-bit editions
• Microsoft Office 2019 for 64-bit editions
• Microsoft Office 2019 for Mac
• Microsoft Edge (Chromium-based)
• Microsoft Dynamics 365 (on-premises) version 9.0
• Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (GDR)
• Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (GDR)
• Microsoft SQL Server 2014 Service Pack 3 for 32-bit Systems (CU 4)
• Microsoft 365 Apps for Enterprise for 32-bit Systems
• Microsoft 365 Apps for Enterprise for 64-bit Systems
• Microsoft SQL Server 2019 for x64-based Systems (GDR)
• Microsoft SQL Server 2014 Service Pack 3 for x64-based Systems (CU 4)
• Microsoft Dynamics 365 (on-premises) version 9.1
• Windows Server 2022
• Windows Server 2022 (Server Core installation)
• Windows 11 version 21H2 for x64-based Systems
• Windows 11 version 21H2 for ARM64-based Systems
• Windows 10 Version 21H2 for 32-bit Systems
• Windows 10 Version 21H2 for ARM64-based Systems
• Windows 10 Version 21H2 for x64-based Systems
• Microsoft Office LTSC for Mac 2021
• Microsoft Office LTSC 2021 for 64-bit editions
• Microsoft Office LTSC 2021 for 32-bit editions
• ASP.NET Core 6.0
• Azure HDInsight
• .NET 6.0
• Microsoft Exchange Server 2019 Cumulative Update 12
• Microsoft Exchange Server 2016 Cumulative Update 23
• Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR)
• Microsoft Visual Studio 2022 version 17.2
• Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pach
• Azure RTOS GUIX Studio
• Windows 11 Version 22H2 for ARM64-based Systems
• Windows 11 Version 22H2 for x64-based Systems
• Windows 10 Version 22H2 for x64-based Systems
• Windows 10 Version 22H2 for ARM64-based Systems
• Windows 10 Version 22H2 for 32-bit Systems
• Azure Network Watcher VM Extension
• Microsoft Visual Studio 2022 version 17.4
• .NET 7.0
• Azure DevOps Server 2020.1.2
• Microsoft SQL Server 2017 for x64-based Systems (CU 31)
• Microsoft SQL Server 2022 for x64-based Systems (GDR)
• Microsoft Office for Android
• Microsoft Office for Universal
• Microsoft OLE DB Driver 19 for SQL Server
• Microsoft OLE DB Driver 18 for SQL Server
• Microsoft Visual Studio 2022 version 17.6
• Azure DevOps Server 2022.0.1
• Microsoft Exchange Server 2019 Cumulative Update 13
• Microsoft ODBC Driver 17 for SQL Server on Windows
• Microsoft ODBC Driver 17 for SQL Server on Linux
• Microsoft ODBC Driver 17 for SQL Server on MacOS
• Microsoft ODBC Driver 18 for SQL Server on Windows
• Microsoft ODBC Driver 18 for SQL Server on Linux
• Microsoft ODBC Driver 18 for SQL Server on MacOS
• Azure DevOps Server 2020.0.2
• Microsoft Visual Studio 2022 version 17.7
• Skype for Business Server 2019 CU7
• Skype for Business Server 2015 CU13
• Microsoft SQL Server 2022 for x64-based Systems (CU 8)
• Microsoft SQL Server 2019 for x64-based Systems (CU 22)
• Azure RTOS GUIX Studio Installer Application
• ASP.NET Core 7.0
• Azure Identity SDK for JavaScript
• Azure Identity SDK for .NET
• Azure Identity SDK for Java
• Azure Identity SDK for Python
• Microsoft Common Data Model SDK for C#
• Microsoft Common Data Model SDK for Java
• Microsoft Common Data Model SDK for TypeScript
• Microsoft Common Data Model SDK for Python
• Windows Server 2008 for 32-bit Systems Service Pack 2
• Windows Server 2008 for x64-based Systems Service Pack 2
• Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)

Se recomienda acudir a la publicación oficial y revisar las versiones y parches de remediación ofrecidos por Microsoft

Para más información, cualquier otra incidencia o problema de seguridad, puede ponerse en contacto a través de nuestra dirección de correo csirt@seresco.es