Microsoft security advisory – May 2023 monthly rollup - Update 1 (AV23-255)

Serial number: AV23-255
Date: May 11, 2023

On May 9, 2023, Microsoft published Security Updates to address vulnerabilities in multiple products. Included were critical updates for the following:

• Microsoft Sharepoint Server – multiple versions and platforms
• Windows 10 – multiple versions and platforms
• Windows 11 – multiple versions and platforms
• Windows Server – multiple versions and platforms

Microsoft has indicated that CVE-2023-24932 and CVE-2023-29336 have been exploited.

In addition to critical updates, Microsoft has also released CVE-2023-29324 as an update to a previously patched Outlook Elevation of Privilege Vulnerability CVE-2023-23397 and is recommending that customers apply both updates to remain fully protected.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Windows MSHTML platform security feature bypass vulnerability
• Microsoft mitigates Outlook elevation of privilege vulnerability
• May 2023 Release Notes
• Security Update Guide