Three new Zero-Day CVE disclosed

**Executive Summary:** Microsoft disclosed three critical zero-day vulnerabilities—CVE-2023-41763 (Skype for Business information disclosure), CVE-2023-36563 (OLE/NTLM hash disclosure enabling offline credential cracking), and CVE-2023-44487 (HTTP/2 rapid-reset DoS)—and the report outlines how an attacker could chain them to map internal services, harvest credentials, and launch internal DoS attacks; it also lists Microsoft patches, workarounds, and ThreatLocker-specific mitigations.