Microsoft has recently released critical security updates aimed at addressing significant vulnerabilities in its Windows operating system and associated software. This rollout is part of the scheduled Patch Tuesday updates for June 2023.
The update addresses a total of 73 vulnerabilities, categorized by severity as follows: six are marked as Critical, 63 as Important, two as Moderate, and one as Low. Notably, this includes three vulnerabilities in Microsoft’s Chromium-based Edge browser.
Moreover, Microsoft has resolved 26 additional flaws in the Edge browser, all tied to Chromium, since the previous month’s updates. Among these is CVE-2023-3079, which was reported to be actively exploited in the wild just a week ago.
The June update is particularly noteworthy due to the absence of any publicly known zero-day vulnerabilities in Microsoft products at the time of its release. This marks a significant shift compared to previous months where such flaws were common.
The most concerning vulnerability addressed is CVE-2023-29357, which has a CVSS score of 9.8. This privilege escalation flaw in SharePoint Server allows attackers to potentially gain administrative access. Microsoft warns that an attacker could exploit this flaw via spoofed JWT authentication tokens, enabling unauthorized access to user privileges without requiring any actions from the user.
Microsoft also patched three severe remote code execution vulnerabilities within the Windows Pragmatic General Multicast (PGM) protocol, which carry a similar CVSS score of 9.8. These vulnerabilities could allow malicious entities to execute code remotely and trigger harmful actions.
Furthermore, two remote code execution vulnerabilities affecting Exchange Server, identified as CVE-2023-28310 and CVE-2023-32031, were also fixed, potentially limiting exploits that could lead to unauthorized control of affected systems.
Alongside these updates from Microsoft, numerous other vendors have issued their own security patches over recent weeks, affecting various vulnerabilities. Companies like Adobe, Cisco, and Google, among others, have been proactive in addressing potential threats within their software ecosystems. This collaborative effort underscores a heightened awareness of cybersecurity risks across the industry.
For organizations, these updates serve as a crucial reminder of the importance of maintaining robust cybersecurity practices. The adoption of the MITRE ATT&CK framework can provide clarity in understanding the techniques likely employed during such vulnerabilities, including tactics like initial access, persistence, and privilege escalation. Ensuring systems are up-to-date with the latest patches is not merely a compliance measure but a fundamental aspect of preserving security in an increasingly complex digital landscape.
