Security News > 2023 > August > Microsoft Patch Tuesday: 74 CVEs plus 2 “Exploit Detected” advisories
The August 2023 Microsoft security updates are out, with 74 CVE-numbered bugs fixed.
Intriguingly, if not confusingly, Microsoft's offical bug listing page is topped by two special items dubbed Exploitation Detected.
Technically this doesn't seem to be a zero-day this month, given that there was a patch for it in July 2023, even though it counts as an Exploitation Detected bug because crooks were historically known to be abusing the vulnerability before any patch was available.
The special Advisory page doesn't shed much more light on the issue, saying simply, "Microsoft has released an update for Microsoft Office that provides enhanced security as a defense in depth measure."
Confusingly, Microsoft's main Patch Tuesday bug-listing page says Exploitation Detected against this item, without saying what sort of attacks were carried out.
In other words, to defend against these bugs, don't just remember our encouragement to Patch early, patch often, but also our more general advice about online invitations, which says: If in doubt, leave it out.
News URL
Related news
- Microsoft February 2025 Patch Tuesday fixes 4 zero-days, 55 flaws (source)
- February's Patch Tuesday sees Microsoft offer just 63 fixes (source)
- Microsoft’s Patch Tuesday Fixes 63 Flaws, Including Two Under Active Exploitation (source)
- Patch Tuesday: Microsoft Patches Two Actively Exploited Zero-Day Flaws (source)
- Microsoft March 2025 Patch Tuesday fixes 7 zero-days, 57 flaws (source)
- Patch Tuesday: Microsoft Fixes 57 Security Flaws – Including Active Zero-Days (source)
- Hackers exploit Cityworks RCE bug to breach Microsoft IIS servers (source)
- February 2025 Patch Tuesday forecast: New directions for AI development (source)
- SonicWall firewall exploit lets hackers hijack VPN sessions, patch now (source)
- FINALDRAFT Malware Exploits Microsoft Graph API for Espionage on Windows and Linux (source)