—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA256
===========================================================================
AUSCERT Security Bulletin
ASB-2023.0122
Microsoft Patch Tuesday update for Microsoft Apps for JUly 2023
12 July 2023
===========================================================================
AusCERT Security Bulletin Summary
———————————
Product: Paint 3D
Operating System: Windows
Resolution: Patch/Upgrade
CVE Names: CVE-2023-35374 CVE-2023-32047
Comment: CVSS (Max): 7.8 CVE-2023-32047 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
CVSS Source: Microsoft
Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
OVERVIEW
Microsoft has released its monthly security patch update for the
month of July 2023.
This update resolves 2 vulnerabilities across the following
product(s): [1]
Paint 3D
IMPACT
Microsoft has given the following details regarding these vulnerabilities.
Details Impact Severity
CVE-2023-32047 Remote Code Execution Important
CVE-2023-35374 Remote Code Execution Important
MITIGATION
Microsoft recommends updating the software to the latest available
version available on the Microsoft Update Catalog. [1].
REFERENCES
[1] Microsoft Security Update Guidance
https://portal.msrc.microsoft.com/en-us/security-guidance
AusCERT has made every effort to ensure that the information contained
in this document is accurate. However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation’s site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: [email protected]
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
—–BEGIN PGP SIGNATURE—–
Comment: https://auscert.org.au/gpg-key/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=RBlZ
—–END PGP SIGNATURE—–
Source: Read More
Security Bulletins