Weekly briefing
Week 48 · 27 Nov – 3 Dec 2023 UTC · assess the changes, then plan the next dates.
Act on1
-
Google Skia Integer Overflow Vulnerability
CVE-2023-6345
Coming up3
-
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability
CVE-2023-36025
Same day: CISA KEV deadline: Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability; CISA KEV deadline: Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability
-
Patch Tuesday, 12 December 2023
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
How this list is chosen
Changes from 27 Nov 2023 – 3 Dec 2023 UTC and dates due up to 2 Jan 2024. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.
Ranked by kind: exploited vulnerabilities, then up to 3 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.
The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.