{"id":51027,"date":"2023-03-15T14:24:35","date_gmt":"2023-03-15T14:24:35","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/34423\/Crims-Exploit-Microsoft-Fortinet-Flaws-Before-Any-Patches-Exist.html"},"modified":"2023-03-15T14:24:35","modified_gmt":"2023-03-15T14:24:35","slug":"crims-exploit-microsoft-fortinet-flaws-before-any-patches-exist","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/crims-exploit-microsoft-fortinet-flaws-before-any-patches-exist\/","title":{"rendered":"Crims Exploit Microsoft, Fortinet Flaws Before Any Patches Exist"},"content":{"rendered":"

Patch Tuesday<\/span> Microsoft’s March Patch Tuesday includes new fixes for 74 bugs, two of which are already being actively exploited, and nine that are rated critical. Let’s start with the two that miscreants found before Redmond issued a fix.<\/p>\n

First up: prioritize patching CVE-2023-23397<\/a>, a privilege elevation bug in Microsoft Outlook that received a 9.8 out of 10 CVSS rating. While details of the hole haven’t been publicly disclosed, it has already been exploited in the wild by miscreants in Russia against government, energy, and military sectors in Europe, we’re told. Microsoft lists the attack complexity as “low.”<\/p>\n

Redmond is sufficiently worried about this one to have published<\/a> a guide to the bug, and provided documentation and a script to determine if your business has been targeted by criminals trying to exploit this vulnerability. In other words: it’s serious.<\/p>\n