Microsoft addresses 130 CVEs including five that were exploited in the wild as zero-day vulnerabilities and guidance on the malicious use of Microsoft signed drivers.

Microsoft’s July 2023 Patch Tuesday Addresses 130 CVEs (CVE-2023-36884)

Windows Search Remote Code Execution Vulnerability

The remote Windows host is missing security update 5029304. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029259. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029242. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029244. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029253. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029301. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Fax Service Remote Code Execution Vulnerability (CVE-2023-35381)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029250. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Fax Service Remote Code Execution Vulnerability (CVE-2023-35381)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029263. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029307. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Fax Service Remote Code Execution Vulnerability (CVE-2023-35381)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029308. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Windows host is missing security update 5029247. It is, therefore, affected by multiple vulnerabilities

  - Microsoft Message Queuing Remote Code Execution Vulnerability (CVE-2023-35385, CVE-2023-36910,     CVE-2023-36911)

  - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVE-2023-36882)

  - Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability (CVE-2023-35387)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
179501	KB5029304: Windows Server 2012 R2 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179499	KB5029259: Windows 10 LTS 1507 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179498	KB5029242: Windows 10 Version 1607 and Windows Server 2016 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179497	KB5029244: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179495	KB5029253: Windows 11 version 21H2 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179494	KB5029301: Windows Server 2008 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179492	KB5029250: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179491	KB5029263: Windows 11 version 22H2 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179489	KB5029307: Windows Server 2008 R2 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179488	KB5029308: Windows Server 2012 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical
179487	KB5029247: Windows 10 version 1809 / Windows Server 2019 Security Update (August 2023)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2023-36884

high

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical