Microsoft Alert
2579Warning Date
Severity Level
Warning Number
Target Sector
10 October, 2023
● Critical
2023-5840
All
Description:
Microsoft has released security updates to address several vulnerabilities in the following products:
- Windows Server 2022, 2019, 2016, 2012, 2012 R2, 2008, 2008 R2
- Microsoft SharePoint Server 2019, 2016
- Microsoft SharePoint Server Subscription Edition
- Windows 11, 10
- Microsoft Office LTSC 2021
- Microsoft Office 2019
- Microsoft Excel 2016, 2013
- Microsoft 365 Apps
- Microsoft Office Online Server
- Microsoft Edge
Threats:
An attacker could exploit these vulnerabilities by doing the following:
- Remote Code Execution
- Elevate Privileges
- Information Disclosure
- Security feature bypass
- Denial-of-Service (DoS)
Best practice and Recommendations:
The CERT team encourages users to review Microsoft security advisory and update the affected product: