Microsoft Patch Tuesday, December 2023 Edition
ID: 14850f33-a7e1-59cc-b4d9-e0292a8adcfa
STIX ID: report--14850f33-a7e1-59cc-b4d9-e0292a8adcfa
Feed Name: Krebs on Security
Threat Score
**Microsoft December 2023 Patch Tuesday:** Microsoft released fixes for several vulnerabilities in Windows and related components, including critical RCE bugs in MSHTML (CVE-2023-35628) and the Internet Connection Sharing service (CVE-2023-35641), plus an Outlook information-disclosure issue (CVE-2023-35636) that can expose NTLM hashes. No known zero-day exploitation has been reported, but security vendors advise prioritizing updates because the flaws could enable remote code execution or credential-relay attacks.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.