Security News > 2023 > August > Microsoft Patch Tuesday: 74 CVEs plus 2 “Exploit Detected” advisories

The August 2023 Microsoft security updates are out, with 74 CVE-numbered bugs fixed.

Intriguingly, if not confusingly, Microsoft's offical bug listing page is topped by two special items dubbed Exploitation Detected.

Technically this doesn't seem to be a zero-day this month, given that there was a patch for it in July 2023, even though it counts as an Exploitation Detected bug because crooks were historically known to be abusing the vulnerability before any patch was available.

The special Advisory page doesn't shed much more light on the issue, saying simply, "Microsoft has released an update for Microsoft Office that provides enhanced security as a defense in depth measure."

Confusingly, Microsoft's main Patch Tuesday bug-listing page says Exploitation Detected against this item, without saying what sort of attacks were carried out.

In other words, to defend against these bugs, don't just remember our encouragement to Patch early, patch often, but also our more general advice about online invitations, which says: If in doubt, leave it out.

News URL

https://nakedsecurity.sophos.com/2023/08/09/microsoft-patch-tuesday-74-cves-plus-2-exploit-detected-advisories/