The November 2023 Security Update Review

Adobe and Microsoft released November 2023 security updates: Adobe issued 14 bulletins addressing 76 CVEs (notably Acrobat/Reader with 17 CVEs and several critical fixes) while Microsoft released 63 patches covering 78 CVEs. Microsoft flagged three CVEs as under active attack (CVE-2023-36033, CVE-2023-36036, CVE-2023-36025) and a high-severity RCE (CVE-2023-36397, CVSS 9.8); Adobe reported no bugs as publicly known or under active attack. Organizations are advised to prioritize patches for Acrobat/Reader, ColdFusion, RoboHelp, Photoshop, Premiere Pro, and the Microsoft vulnerabilities under active exploitation and the PGM RCE.