Microsoft May 2023 Patch Tuesday Fixes 3 Zero-Days

May 2023 Patch Tuesday Addresses 3 0-Day Vulnerabilities, 38 Others

Microsoft May 2023 Patch Tuesday Fixes 3 Zero-Days

As part of its May 2023 Patch Tuesday Update, Microsoft has released numerous security updates in response to various vulnerabilities; three among which had already been identified as zero day threats due to ongoing exploitation by bad actors: CVE-2023-29336, CVE-2023-29325, and CVE-2023-24932.

CVE-2023-29336 – Win32k Kernel driver

CVE-2023-29336 exists within the Windows 10 operating system and permits privilege escalation where an attacker may achieve unauthorized access upon exploiting this flaw successfully; thus gaining elevated SYSTEM privileges beyond those authorized.

CVE-2023-29325 – OLE Flaw

CVE-2023-29325 relates specifically to customers making use of Microsoft Outlook and involves public disclosure of arbitrary code execution techniques by attackers who may prompt users into opening corrupt Office documents on a compromised system.

CVE-2023-24932 – Secure Boot Bypass

CVE-2023-24932 builds off recently resolved vulnerabilities from earlier versions. Reports indicate that hackers have been utilizing it for one very specific reason – – installing BlackLotus UEFI bootkits on targeted devices or systems! This invasion facilitates individual administrative rights’ acquisition following the deployment of malicious software as command-and-control nodes in subsequent attacks against other endpoints. These bootkits are potentially only accessible when physical access or administrative rights are already available in proximity/system; exacerbating ransomware threats.

To help system administrators avoid such vulnerabilities, Microsoft offers patches specifically for all vulnerabilities mentioned; it is strongly encouraged that users and organizations employing Windows apply these patches in a timely manner.

The following CVEs were all addressed by Microsoft on this Patch Tuesday: