Microsoft’s October 2023 Patch Tuesday Addresses 103 CVEs (CVE-2023-36563, CVE-2023-41763)

Microsoft addresses 103 CVEs including two vulnerabilities that were exploited in the wild.

Microsoft patched 103 CVEs in its October Patch Tuesday release including two that were exploited in the wild. This month's patches include 12 rated as critical and 91 rated as important. We omitted CVE-2023-44487 from our counts as this vulnerability was reported to MITRE and not Microsoft and does not exclusively affect Microsoft products. 

Of the vulnerabilities patched this month, Remote code execution (RCE) vulnerabilities accounted for 43.7% of the vulnerabilities patched this month, followed by elevation of privilege (EoP) vulnerabilities at 25.2%.

For more information about these vulnerabilities, including the availability of patches and Tenable product coverage, please visit our blog.