Microsoft Patch Tuesday, November 2023 Edition

Microsoft released fixes for more than fifty vulnerabilities in Windows and related products, including three zero-day flaws actively exploited in the wild: a SmartScreen bypass (CVE-2023-36025), a DWM Core Library local privilege escalation to SYSTEM (CVE-2023-36033), and a Cloud Files Mini Filter Driver elevation (CVE-2023-36036). The bulletin also flags several Exchange vulnerabilities and other high-severity bugs disclosed prior to patches; organizations are urged to prioritize updates, back up systems, and hunt for related indicators such as .url attachments and suspicious process spawns.