Weekly briefing
Week 43 · 23 Oct – 29 Oct 2023 UTC · assess the changes, then plan the next dates.
Act on1
-
Cisco IOS XE Web UI Command Injection Vulnerability
CVE-2023-20273
Coming up3
-
Microsoft WordPad Information Disclosure Vulnerability
CVE-2023-36563
Same day: CISA KEV deadline: Microsoft Skype for Business Privilege Escalation Vulnerability
-
Patch Tuesday, 14 November 2023
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
Changed1
-
VMSA-2023-0024:VMware Tools updates address Local Privilege Escalation and SAML Token Signature Bypass vulnerabilities
VMware security advisories (Broadcom)
How this list is chosen
Changes from 23 Oct 2023 – 29 Oct 2023 UTC and dates due up to 28 Nov 2023. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.
Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.
The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.