Security 10721 Published by

Microsoft has announced the security updates for September 2023.

Security Update Guide - Microsoft Security Response Center

This release consists of the following 59 Microsoft CVEs:

TagCVEBase ScoreFAQs?Workarounds?Mitigations?
Microsoft Azure Kubernetes Service CVE-2023-293327.5YesNoNo
Azure DevOps CVE-2023-331368.8YesNoNo
Windows Cloud Files Mini Filter Driver CVE-2023-353557.8YesNoNo
Microsoft Identity Linux Broker CVE-2023-367364.4YesNoNo
3D Viewer CVE-2023-367397.8YesNoNo
3D Viewer CVE-2023-367407.8YesNoNo
Visual Studio Code CVE-2023-367427.8YesNoNo
Microsoft Exchange Server CVE-2023-367448.0YesNoNo
Microsoft Exchange Server CVE-2023-367458.0YesNoNo
Microsoft Exchange Server CVE-2023-367568.0YesNoNo
Microsoft Exchange Server CVE-2023-367578.0YesNoNo
Visual Studio CVE-2023-367587.8YesNoNo
Visual Studio CVE-2023-367596.7YesNoNo
3D Viewer CVE-2023-367607.8YesNoNo
Microsoft Office Word CVE-2023-367616.2YesNoNo
Microsoft Office Word CVE-2023-367627.3YesNoNo
Microsoft Office Outlook CVE-2023-367637.5YesNoNo
Microsoft Office SharePoint CVE-2023-367648.8YesNoNo
Microsoft Office CVE-2023-367657.8YesNoNo
Microsoft Office Excel CVE-2023-367667.8YesNoNo
Microsoft Office CVE-2023-367674.3YesNoNo
3D Builder CVE-2023-367707.8YesNoNo
3D Builder CVE-2023-367717.8YesNoNo
3D Builder CVE-2023-367727.8YesNoNo
3D Builder CVE-2023-367737.8YesNoNo
Microsoft Exchange Server CVE-2023-367775.7YesNoNo
.NET Framework CVE-2023-367887.8YesNoNo
.NET and Visual Studio CVE-2023-367927.8YesNoNo
.NET and Visual Studio CVE-2023-367937.8YesNoNo
.NET and Visual Studio CVE-2023-367947.8YesNoNo
.NET and Visual Studio CVE-2023-367967.8YesNoNo
.NET Core & Visual Studio CVE-2023-367996.5YesNoNo
Microsoft Dynamics Finance & Operations CVE-2023-368007.6YesNoNo
Windows DHCP Server CVE-2023-368015.3YesNoYes
Microsoft Streaming Service CVE-2023-368027.8YesNoNo
Windows Kernel CVE-2023-368035.5YesNoNo
Windows GDI CVE-2023-368047.8YesNoNo
Windows Scripting CVE-2023-368057.0YesNoNo
Microsoft Dynamics CVE-2023-368867.6YesNoNo
Windows Kernel CVE-2023-381397.8YesNoNo
Windows Kernel CVE-2023-381405.5YesNoNo
Windows Kernel CVE-2023-381417.8YesNoNo
Windows Kernel CVE-2023-381427.8YesNoNo
Windows Common Log File System Driver CVE-2023-381437.8YesNoNo
Windows Common Log File System Driver CVE-2023-381447.8YesNoNo
Windows Themes CVE-2023-381468.8YesNoNo
Microsoft Windows Codecs Library CVE-2023-381478.8YesNoNo
Windows Internet Connection Sharing (ICS) CVE-2023-381488.8YesNoYes
Windows TCP/IP CVE-2023-381497.5NoYesYes
Windows Kernel CVE-2023-381507.8YesNoNo
Windows DHCP Server CVE-2023-381525.3YesNoYes
Azure DevOps CVE-2023-381557.0YesNoNo
Azure HDInsights CVE-2023-381567.2YesNoNo
Windows TCP/IP CVE-2023-381605.5YesNoNo
Windows GDI CVE-2023-381617.8YesNoNo
Windows DHCP Server CVE-2023-381627.5NoNoYes
Windows Defender CVE-2023-381637.8YesNoNo
Microsoft Dynamics CVE-2023-381647.6YesNoNo
Microsoft Office CVE-2023-417645.5YesNoNo

We are republising 7 non-Microsoft CVEs:

Autodesk3D Viewer CVE-2022-41303YesNoNo
ElectronVisual Studio Code CVE-2023-39956YesNoNo
ChromeMicrosoft Edge (Chromium-based) CVE-2023-4761YesNoNo
ChromeMicrosoft Edge (Chromium-based) CVE-2023-4762YesNoNo
ChromeMicrosoft Edge (Chromium-based) CVE-2023-4763YesNoNo
ChromeMicrosoft Edge (Chromium-based) CVE-2023-4764YesNoNo
ChromeMicrosoft Edge (Chromium-based) CVE-2023-4863YesNoNo

Security Update Guide Blog Posts

DateBlog Post
January 11, 2022 Coming Soon: New Security Update Guide Notification System
February 9, 2021 Continuing to Listen: Good News about the Security Update Guide API
January 13, 2021 Security Update Guide Supports CVEs Assigned by Industry Partners
December 8, 2020 Security Update Guide: Let’s keep the conversation going
November 9, 2020 Vulnerability Descriptions in the New Version of the Security Update Guide

Relevant Resources

  • The new Hotpatching feature is now generally available. Please see  Hotpatching feature for Windows Server Azure Edition virtual machines (VMs) for more information.
  • Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the  Microsoft Update Catalog. For information on lifecycle and support dates for Windows 10 operating systems, please see  Windows Lifecycle Facts Sheet.
  • Microsoft is improving Windows Release Notes. For more information, please see  What's next for Windows release notes.
  • A list of the latest servicing stack updates for each operating system can be found in  ADV990001. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.
  • In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.
  • Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See  4522133 for more information.

Known Issues

You can see these in more detail from the Deployments tab by selecting Known Issues column in the Edit Columns panel.

For more information about Windows Known Issues, please see  Windows message center (links to currently-supported versions of Windows are in the left pane).

KB ArticleApplies To
5002472SharePoint Server 2019 Core
5002474SharePoint Server Subscription Edition
5002494SharePoint Enterprise Server 2016
5002501SharePoint Enterprise Server 2016
5030216Windows Server 2022
5030261Windows Server 2008 R2 (Security-only update)
5030265Windows Server 2008 R2 (Monthly Rollup)
5030271Windows Server 2008 (Monthly Rollup)
5030286Windows Server 2008 (Security-only update)


Security Update Guide - Microsoft Security Response Center