NVD disclosure day

Published threat advisories for May 9, 2023

CVE advisoryKnown Exploit

CVE-2023-29336

Microsoft Win32k Privilege Escalation Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A Win32k privilege escalation vulnerability impacts Windows systems, allowing local attackers to gain elevated system control. This poses a risk to data and operations. Organizations should identify affected systems and apply vendor updates to mitigate risk.

NVD published: • CISA KEV
CVE advisoryKnown Exploit

CVE-2023-24955

Microsoft SharePoint Server Remote Code Execution Advisory.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

Microsoft SharePoint Server has a vulnerability allowing an authenticated attacker to execute code remotely. This poses a risk of system compromise and data access for affected organizations. Business operations could be disrupted if attackers exploit this flaw.

NVD published: • CISA KEV