Microsoft Issues January 2023 Patch Tuesday Updates, Warns of Zero-Day Exploit

The first Patch Tuesday fixes shipped by Microsoft for 2023 have addressed a total of 98 security flaws, including one bug that the company said is being actively exploited in the wild. 11 of the 98 issues are rated Critical and 87 are rated Important in severity, with one of the vulnerabilities...

CVE-2023-21763

Microsoft Exchange Server Elevation of Privilege Vulnerability...

CVE-2023-21763

CVE-2023-21763 is an Elevation of Privilege vulnerability in Microsoft Exchange Server. Public sources describe a local attacker exploiting a hard-coded DLL path to gain SYSTEM privileges, with listed patched updates (KB5022143 for Exchange Server 2016/2019 and related CU/updates). Affected produ...

KLA20155 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to spoof user interface, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Exchange Server can be...