Tripwire Patch Priority Index for June 2023

Image

Tripwire's June 2023 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft and Progress MOVEit.

First on the patch priority list this month are patches for the Progress MOVEit Transfer application. An exploit targeting the MOVEit vulnerability CVE-2023-34362 has been recently added to the Metasploit Exploit Framework.

Next on the patch priority list this month are patches for Microsoft Edge. These patches resolve elevation of privilege, information disclosure, and security feature bypass vulnerabilities.

Up next are patches for Microsoft Office, Outlook, Excel, and OneNote that resolve remote code execution and spoofing vulnerabilities.

Next are patches that affect components of the core Windows operating system. These patches resolve over 35 vulnerabilities, including elevation of privilege, information disclosure, security feature bypass, remote code execution, and denial of service vulnerabilities. These vulnerabilities affect core Windows, Kernel, iSCSI, Installer, Remote Desktop Client, SMB, CryptoAPI, Pragmatic General Multicast (PGM), and others.

Up next are patches for Visual Studio and .NET that resolve over 20 issues including denial of service, elevation of privilege, remote code execution, and information disclosure vulnerabilities.

Lastly, administrators should focus on server-side patches for Exchange, Dynamics, SharePoint, DNS Server, DHCP Server, Azure DevOps and Hyper-V. These patches resolve numerous issues including remote code execution, spoofing, denial of service, elevation of privilege, and information disclosure vulnerabilities.