Microsoft · Security update · October 10, 2023

KB5031408: October 2023 security update

KB5031408, released October 10, 2023, fixes 57 CVEs across 2 products. 2 of them are being exploited (CVE-2023-36563); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEV1 publicly disclosedUnsupported product
CVEs closed
57
12 rated Critical
Exploited
2
CVE-2023-36563
Exploitation more likely
7
Microsoft's assessment
Highest EPSS
0.6936
99th percentile

Priority of the 57 CVEs

Patch now 2 Urgent 18 High 33 Routine 4

Applies to

Product
Windows Server 2008 R2 for x64-based Systems Service Pack 1
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2023-36563 Microsoft WordPadInformation Disclosure6.5 0.2032 KEVDisclosedExploited
Patch now CVE-2023-36584 Windows Mark of the Web (MOTW)Security Feature Bypass5.4 0.0325 KEVExploited
Urgent CVE-2023-36594 Microsoft Graphics ComponentElevation of Privilege7.8 0.0800 More likely
Urgent CVE-2023-36713 Windows Common Log File System DriverInformation Disclosure5.5 0.0733 More likely
Urgent CVE-2023-36731 Windows Win32KElevation of Privilege7.8 0.0662 More likely
Urgent CVE-2022-37967 Windows KerberosElevation of Privilege7.2 0.0482 More likely
Urgent CVE-2023-36743 Windows Win32KElevation of Privilege7.8 0.0363 More likely
Urgent CVE-2023-35349 Windows Message QueuingRemote Code Execution9.8 0.0289 Exploitation Less Likely
Urgent CVE-2023-36697 Windows Message QueuingRemote Code Execution6.8 0.0220 Exploitation Less Likely
Urgent CVE-2023-36776 Windows Win32KElevation of Privilege7.0 0.0205 More likely
Urgent CVE-2023-41773 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0131 Exploitation Less Likely
Urgent CVE-2023-41774 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0131 Exploitation Less Likely
Urgent CVE-2023-38166 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41765 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41767 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41768 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41769 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41770 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-41771 Windows Layer 2 Tunneling ProtocolRemote Code Execution8.1 0.0130 Exploitation Less Likely
Urgent CVE-2023-36732 Windows Win32KElevation of Privilege7.8 0.0063 More likely
High CVE-2023-36606 Windows Message QueuingDenial of Service7.5 0.6936 Exploitation Less Likely
High CVE-2023-36585 Windows UPnP Device HostDenial of Service7.5 0.0260 Exploitation Less Likely
High CVE-2023-36703 Windows DHCP ServerDenial of Service7.5 0.0252 Exploitation Less Likely
High CVE-2023-36431 Windows Message QueuingDenial of Service7.5 0.0248 Exploitation Less Likely
High CVE-2023-36579 Windows Message QueuingDenial of Service7.5 0.0248 Exploitation Less Likely
Showing 1 to 25 of 57 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.