Posts: 13,295
Threads: 9,036
Thanks Received: 8,861 in 7,016 posts
Thanks Given: 9,809
Joined: 12 September 18
13 December 23, 09:50
Quote:Microsoft released security updates for all supported Windows operating systems and other company products on the December 2023 Patch Day. The company fixed 36 unique Microsoft product vulnerabilities and six non Microsoft product vulnerabilities on the last Patch Day of the year 2023.
It is a smaller Patch Day that fixes three critical security issues in all supported Windows client and server products. The update fixes one publicly disclosed 0-day vulnerability. Listed as CVE-2023-20588, it affects devices with AMD processors only.
Our overview is designed to be a resource for system administrators and home users alike. It includes information about all major security updates that Microsoft released. You find links to support pages and resources, the list of known issues, direct download links and more listed below.
Check out the November 2023 Security update overview here.
Microsoft Windows Security Updates: November 2023
Here is a link to an Excel spreadsheet that lists information about the released security updates on the December 2023 Microsoft Patch Day. Follow this link to download an archive file that contains the spreadsheet: Microsoft Windows security updates December 2023
Executive Summary
Each supported version of Windows and their critical vulnerabilities are listed below.- Windows 10 version 22H2: 15 vulnerabilities, 3 critical and 12 important.
- Internet Connection Sharing (ICS) Remote Code Execution Vulnerability -- CVE-2023-35630
- Windows MSHTML Platform Remote Code Execution Vulnerability -- CVE-2023-35628
- Internet Connection Sharing (ICS) Remote Code Execution Vulnerability -- CVE-2023-35641
- Windows 11 version 22H2: 17 vulnerabilities, 3 critical and 14 important
- same as Windows 10 version 22H2
- Windows 11 version 23H2: 18 vulnerabilities, 3 critical and 15 important
- same as Windows 10 version 22H2
Windows Server products- Windows Server 2008 R2 (extended support only): 15 vulnerabilities: 3 critical and 12 important
- Internet Connection Sharing (ICS) Remote Code Execution Vulnerability -- CVE-2023-35630
- Windows MSHTML Platform Remote Code Execution Vulnerability -- CVE-2023-35628
- Internet Connection Sharing (ICS) Remote Code Execution Vulnerability -- CVE-2023-35641
- Windows Server 2012 R2 (extended support only): 61 vulnerabilities: 11 critical and 50 important
- Windows Server 2016: 17 vulnerabilities: 3 critical and 14 important
- same as Windows Server 2008 R2
- Windows Server 2019: 19 vulnerabilities: 3 critical and 16 important
- same as Windows Server 2008 R2
- Windows Server 2022: 18 vulnerabilities: 3 critical and 15 important.
- same as Windows Server 2008 R2
...
Continue Reading