Hello and welcome to the Wednesday, November 15th, 2023 edition of the Sansonet Storm Center's

Stormcast. My name is Johannes Ulrich, and today I'm recording from Jacksonville, Florida.

It's Microsoft Patch Tuesday, so let's dive right in. We got patches for 64 different vulnerabilities in Microsoft products.

There were 14 vulnerabilities affecting chromium and with that Microsoft Edge.

There were also five vulnerabilities mentioned in the patch Tuesday release that are really Linux vulnerabilities and they affect

the Microsoft Linux distribution Mariner that is used in Asia. So I didn't really cover them as part

of our Patch Tuesday overview because there aren't really anything special sort of Microsoft related.

Only three of the vulnerabilities are considered critical.

Now we had five different vulnerabilities that were either already known prior to Patch Tuesday

or that are already being exploited.

None of those five actually falls in the critical category. Let's start with the first

one of the already disclosed vulnerabilities. That's CVE 202033-36-038. This is a denial of service

vulnerability in ASP.net core, CVSS score of 8.2. The second one is more

interesting. That's a Microsoft Office security feature bypass CVE 2023-36413. When you download a document,

when you receive a document, email and open it, it's supposed to open in the restricted, the protected mode.

Well, due to this vulnerability, that can be bypassed and the document becomes fully editable, which also means some active content like macros and such may be enabled.

Then we have a privilege escalation vulnerability, actually a couple of them, CVE 2023-36-036.

That one is already being exploited. It's in the Microsoft Windows Cloud Files mini-filter driver.

And the second Prolige Escal approach escalation vulnerability that is being exploited and has been disclosed

prior to the patch release is a flaw in the Windows DWM Core Library.

A second security feature vulnerability or security feature bypass vulnerability and and that's CVE 20203-36-025 in Windows Smart Screen, already being exploited and not yet made public.

And finally, there is sort of one critical vulnerability that I want to point out, and that's CVE

...