Microsoft Patch Tuesday June 2023: Edge type confusion, Git RCE, OneNote Spoofing, PGM RCE, Exchange RCE, SharePoint EoP

🗓️ 25 Jun 2023 00:35:58Reported by Alexander LeonovType

avleonov

avleonov🔗 avleonov.com👁 69 Views

Microsoft Patch Tuesday June 2023: Edge type confusion, Git RCE, OneNote Spoofin

Reporter	Title	Published	Views	Family All 1045
zdt	Microsoft OneNote (Version 2305 Build 16.0.16501.20074) 64-bit - Spoofing Vulnerability	26 Jun 202300:00	–	zdt
zdt	Sharepoint Dynamic Proxy Generator Remote Command Execution Exploit	27 Mar 202400:00	–	zdt
Vulnrichment	CVE-2023-33135 .NET and Visual Studio Elevation of Privilege Vulnerability	13 Jun 202323:26	–	vulnrichment
Vulnrichment	CVE-2023-33139 Visual Studio Information Disclosure Vulnerability	13 Jun 202323:25	–	vulnrichment
Vulnrichment	CVE-2023-33140 Microsoft OneNote Spoofing Vulnerability	13 Jun 202323:26	–	vulnrichment
Vulnrichment	CVE-2023-33141 Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability	23 Jun 202301:25	–	vulnrichment
Vulnrichment	CVE-2023-33144 Visual Studio Code Spoofing Vulnerability	13 Jun 202323:26	–	vulnrichment
Vulnrichment	CVE-2022-41082 Microsoft Exchange Server Remote Code Execution Vulnerability	3 Oct 202200:00	–	vulnrichment
Vulnrichment	CVE-2023-21529 Microsoft Exchange Server Remote Code Execution Vulnerability	14 Feb 202319:33	–	vulnrichment
Vulnrichment	CVE-2023-28310 Microsoft Exchange Server Remote Code Execution Vulnerability	14 Jun 202314:52	–	vulnrichment

25 Jun 2023 00:35Current

9.1High risk

Vulners AI Score9.1

CVSS 3.19.8

EPSS0.9997

SSVC

microsoft edge git onenote .net yarp windows authentication visual studio pgm denial of service information disclosure elevation of privilege