Microsoft Patch Tuesday Release: Addressing Critical Vulnerabilities in Outlook and Other Products

Microsoft has released its March 2023 Patch Tuesday update, addressing 76 CVEs across various products, including critical vulnerabilities in Outlook. The company patched nine critical, 66 important, and one moderate vulnerability in this release.

One of the notable vulnerabilities is CVE-2023-23397, an elevation of privilege (EoP) bug in Microsoft Outlook that has been exploited in the wild. This vulnerability allows attackers to establish a connection with an attacker-controlled device, potentially leading to remote code execution (RCE). The CVSSv3 score for this vulnerability is 9.8.

The latest version of Microsoft Edge is not directly affected by these vulnerabilities; however, it's essential to keep your browser up-to-date to ensure you're protected from other potential threats. Additionally, users are advised to update their Outlook software and other vulnerable products promptly to prevent exploitation by attackers.

The March patch release also includes patches for various network protocols, including Windows Point-to-Point Protocol over Ethernet (PPPoE), Windows Internet Key Exchange (IKE) Protocol, Remote Access Service Point-to-Point Tunneling Protocol, Internet Control Message Protocol (ICMP), and Client Server Run-time Subsystem (CSRSS).

It's worth noting that the Trusted Platform Module (TPM2.0) Library also received two CVEs in this release, which were addressed by Microsoft.

Microsoft Edge users can check for updates by opening the browser, clicking on the three dots in the top right corner, and selecting 'Help' > 'About Microsoft Edge'. If an update is available, it will be downloaded and installed automatically. Users are advised to regularly check for updates and follow best practices for maintaining a secure online experience.

In conclusion, the latest version of Microsoft Edge, as well as other vulnerable products, requires prompt attention to ensure protection from potential threats. By keeping your browser and software up-to-date, you can minimize the risk of exploitation by attackers.

Microsoft edge latest version