The Patch Report for April 2023
#ThePatchReport #ZeroDayInitiative #0day
Welcome to the April 2023 edition of the Patch Report – our brief look into the latest security updates from Microsoft, Adobe, and beyond. This month sees patches for 0-days in both Apple and Microsoft products. Join us as we break down the release, delve into a couple of tin foil hat theories, and point out where enterprises should focus their attention.
You can read the full patch blog at: https://www.zerodayinitiative.com/blog/2023/4/11/the-april-2023-security-update-review
00:00 Introduction
00:36 Acrobat and Reader updates
00:56 Apple 0-days in the wild
01:54 CLFS 0-day in the wild
02:44 Remote code execution in MSMQ
03:35 SQL Server RCE
05:12 Fix for 10-year-bug in WinVerifyTrust
Microsoft Trusted Root Program: https://learn.microsoft.com/en-us/security/trusted-root/program-requirements
06:35 DNS Server bugs
07:08 DHCP Server RCE
8:56 Security feature bypass bugs that require physical access
09:35 Spoofing(?) bug in SharePoint
10:09 Wrap up
by Zero Day Initiative
windows server dhcp
