Microsoft · Security update · September 12, 2023

KB5030278: September 2023 security update

KB5030278, released September 12, 2023, fixes 13 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Microsoft's assessment

Highest EPSS

0.2402

97th percentile

Priority of the 13 CVEs

Patch now 0
                                Urgent 7
                                High 5
                                Routine 1

Applies to

Product
Windows Server 2012
Windows Server 2012 (Server Core installation)

CVEs this fix closes

Priority	CVE	Component	Impact	CVSS	EPSS	Exploitation
Urgent	CVE-2023-38152	Windows DHCP Server	Information Disclosure	5.3	0.2402	More likely
Urgent	CVE-2023-38142	Windows Kernel	Elevation of Privilege	7.8	0.0555	More likely
Urgent	CVE-2023-38144	Windows Common Log File System Driver	Elevation of Privilege	7.8	0.0345	More likely
Urgent	CVE-2023-38143	Windows Common Log File System Driver	Elevation of Privilege	7.8	0.0341	More likely
Urgent	CVE-2023-38160	Windows TCP/IP	Information Disclosure	5.5	0.0094	More likely
Urgent	CVE-2023-36804	Windows GDI	Elevation of Privilege	7.8	0.0060	More likely
Urgent	CVE-2023-38161	Windows GDI	Elevation of Privilege	7.8	0.0059	More likely
High	CVE-2023-38162	Windows DHCP Server	Denial of Service	7.5	0.1069	Exploitation Less Likely
High	CVE-2023-38149	Windows TCP/IP	Denial of Service	7.5	0.0448	Exploitation Less Likely
High	CVE-2023-36805	Windows Scripting	Security Feature Bypass	7.0	0.0176	Exploitation Less Likely
High	CVE-2023-38139	Windows Kernel	Elevation of Privilege	7.8	0.0093	Exploitation Less Likely
High	CVE-2023-38141	Windows Kernel	Elevation of Privilege	7.8	0.0063	Exploitation Less Likely
Routine	CVE-2023-36801	Windows DHCP Server	Information Disclosure	5.3	0.0165	Exploitation Less Likely

Released the same day

KB5002100
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5002457
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)
KB5002470
Microsoft Office Online Server
KB5002472
Microsoft SharePoint Server 2019
KB5002474
Microsoft SharePoint Server Subscription Edition
KB5002477
Microsoft Office 2013 RT Service Pack 1, Microsoft Office 2013 Service Pack 1 (32-bit editions), Microsoft Office 2013 Service Pack 1 (64-bit editions)
KB5002483
Microsoft Word 2013 RT Service Pack 1, Microsoft Word 2013 Service Pack 1 (32-bit editions), Microsoft Word 2013 Service Pack 1 (64-bit editions)
KB5002488
Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2013 Service Pack 1 (32-bit editions), Microsoft Excel 2013 Service Pack 1 (64-bit editions)
KB5002494
Microsoft SharePoint Enterprise Server 2016
KB5002496
Microsoft Excel 2016 (32-bit edition), Microsoft Excel 2016 (64-bit edition)
KB5002497
Microsoft Word 2016 (32-bit edition), Microsoft Word 2016 (64-bit edition)
KB5002498
Microsoft Office 2016 (32-bit edition), Microsoft Office 2016 (64-bit edition)

Vendor advisory

https://support.microsoft.com/help/5030278

For tools and AI agents

This page as data: JSON · Markdown

Which machines still need it?

Patchblox reads the OS build on every Windows machine, from Intune, ConfigMgr or its own agent, and shows which ones are still below the fixed build.

Get a demo

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.