Microsoft Server security updates, August 2023 (Patch Tuesday 2023-08-08)

Every Microsoft server-product CVE that the Microsoft Security Update Guide published in August 2023, including the Patch Tuesday release on 2023-08-08 and any out-of-band updates. Client-only products (Edge, Office apps, consumer Windows) are not tracked.

Advisories: 32
Critical: 2
High: 22
In CISA KEV: 0
CVEs: 32

Microsoft server CVEs, August 2023

Aug 8, 2023
Critical [CVE-2023-21709] Microsoft Exchange Server Elevation of Privilege Vulnerability
Critical9.8
Aug 8, 2023
Critical [CVE-2023-35385] Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Critical9.8
Aug 8, 2023
High [CVE-2023-38154] Windows Kernel Elevation of Privilege Vulnerability
High7.8
Aug 8, 2023
High [CVE-2023-38181] Microsoft Exchange Server Spoofing Vulnerability
High8.8
Aug 8, 2023
High [CVE-2023-38182] Microsoft Exchange Server Remote Code Execution Vulnerability
High8.0
Aug 8, 2023
High [CVE-2023-36892] Microsoft SharePoint Server Spoofing Vulnerability
High8.0
Aug 8, 2023
High [CVE-2023-38169] Microsoft SQL OLE DB Remote Code Execution Vulnerability
High8.8
Aug 8, 2023
High [CVE-2023-38172] Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
High7.5
Aug 8, 2023
High [CVE-2023-38184] Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
High7.5
Aug 8, 2023
High [CVE-2023-38186] Windows Mobile Device Management Elevation of Privilege Vulnerability
High8.8
Aug 8, 2023
High [CVE-2023-35387] Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
High8.8
Aug 8, 2023
High [CVE-2023-35386] Windows Kernel Elevation of Privilege Vulnerability
High7.8
Aug 8, 2023
High [CVE-2023-35383] Microsoft Message Queuing Information Disclosure Vulnerability
High7.5
Aug 8, 2023
High [CVE-2023-35382] Windows Kernel Elevation of Privilege Vulnerability
High7.8
Aug 8, 2023
High [CVE-2023-35381] Windows Fax Service Remote Code Execution Vulnerability
High8.8
Aug 8, 2023
High [CVE-2023-35380] Windows Kernel Elevation of Privilege Vulnerability
High7.8
Aug 8, 2023
High [CVE-2023-35379] Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability
High7.8
Aug 8, 2023
High [CVE-2023-35378] Windows Projected File System Elevation of Privilege Vulnerability
High7.0
Aug 8, 2023
High [CVE-2023-36904] Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
High7.8
Aug 8, 2023
High [CVE-2023-36903] Windows System Assessment Tool Elevation of Privilege Vulnerability
High7.8
Aug 8, 2023
High [CVE-2023-36900] Windows Common Log File System Driver Elevation of Privilege Vulnerability
High7.8
Aug 8, 2023
High [CVE-2023-36882] Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
High8.8
Aug 8, 2023
High [CVE-2023-36876] Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability
High7.1
Aug 8, 2023
High [CVE-2023-35368] Microsoft Exchange Remote Code Execution Vulnerability
High8.8
Aug 8, 2023
Medium [CVE-2023-36894] Microsoft SharePoint Server Information Disclosure Vulnerability
Medium6.5
Aug 8, 2023
Medium [CVE-2023-36890] Microsoft SharePoint Server Information Disclosure Vulnerability
Medium6.5
Aug 8, 2023
Medium [CVE-2023-35384] Windows HTML Platforms Security Feature Bypass Vulnerability
Medium5.4
Aug 8, 2023
Medium [CVE-2023-36914] Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability
Medium5.5
Aug 8, 2023
Medium [CVE-2023-36908] Windows Hyper-V Information Disclosure Vulnerability
Medium6.5
Aug 8, 2023
Medium [CVE-2023-36907] Windows Cryptographic Services Information Disclosure Vulnerability
Medium5.5
Aug 8, 2023
Medium [CVE-2023-36905] Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability
Medium5.5
Aug 8, 2023
Medium [CVE-2023-36889] Windows Group Policy Security Feature Bypass Vulnerability
Medium5.5

Get an email when Microsoft publishes the next one.

See Microsoft's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Microsoft

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.