Security News > 2023 > August > Microsoft Patch Tuesday: 74 CVEs plus 2 “Exploit Detected” advisories
The August 2023 Microsoft security updates are out, with 74 CVE-numbered bugs fixed.
Intriguingly, if not confusingly, Microsoft's offical bug listing page is topped by two special items dubbed Exploitation Detected.
Technically this doesn't seem to be a zero-day this month, given that there was a patch for it in July 2023, even though it counts as an Exploitation Detected bug because crooks were historically known to be abusing the vulnerability before any patch was available.
The special Advisory page doesn't shed much more light on the issue, saying simply, "Microsoft has released an update for Microsoft Office that provides enhanced security as a defense in depth measure."
Confusingly, Microsoft's main Patch Tuesday bug-listing page says Exploitation Detected against this item, without saying what sort of attacks were carried out.
In other words, to defend against these bugs, don't just remember our encouragement to Patch early, patch often, but also our more general advice about online invitations, which says: If in doubt, leave it out.
News URL
Related news
- Microsoft March 2025 Patch Tuesday fixes 7 zero-days, 57 flaws (source)
- Patch Tuesday: Microsoft Fixes 57 Security Flaws – Including Active Zero-Days (source)
- April 2025 Patch Tuesday forecast: More AI security introduced by Microsoft (source)
- Microsoft April 2025 Patch Tuesday fixes exploited zero-day, 134 flaws (source)
- Patch Tuesday: Microsoft Fixes 134 Vulnerabilities, Including 1 Zero-Day (source)
- March 2025 Patch Tuesday forecast: A return to normalcy (source)
- Choose your own Patch Tuesday adventure: Start with six zero day fixes, or six critical flaws (source)
- Microsoft isn't fixing 8-year-old shortcut exploit abused for spying (source)
- Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks (source)
- Android Malware Exploits a Microsoft-Related Security Blind Spot to Avoid Detection (source)