The bug was reportedly being actively exploited in the wild, but there are no details about it as of now.Īnother notable bug quashed with the incoming update is a Microsoft Exchange remote code execution vulnerability, tracked as CVE-2023-32031.

According to Microsoft, the vulnerability enabled attackers to take on the privileges of other users, including administrators. One of the more notable flaws that has been addressed by the latest Patch Tuesday is a privilege elevation vulnerability in Microsoft SharePoint, tracked as CVE-2023-29357. However, it does not include the 16 Edge flaws that were fixed via a security bulletin rolled out earlier this month. The list of patched bugs includes 17 privilege elevation vulnerabilities, 2 security feature bypass vulnerabilities, 32 RCE vulnerabilities, 5 information disclosure vulnerabilities, 10 DoS vulnerabilities, 10 spoofing vulnerabilities, and 1 Edge vulnerability stemming from a flaw in the Chromium code base. As noted by Bleeping Computer, the Patch Tuesday does not fix any zero-day vulnerabilities, but it is still an important update, given the sheer number of flaws it fixes, including many that have been categorized as 'critical.'

Six out of the thirty-eight RCE bugs were listed as 'critical,' including some that could potentially lead to denial of service (DoS) attacks and privilege elevation. NET and Visual Studio, Teams, Azure DevOps, Microsoft Dynamics, and the Remote Desktop Client.

What just happened? Microsoft has released its June 2023 Patch Tuesday update with fixes for 78 security flaws, including 38 remote code execution (RCE) vulnerabilities in Windows and Windows Components, Office and Office Components, Exchange Server, Edge browser, SharePoint Server.

Download windows 10/11 debloater