Microsoft Zero-Days Allow Defender Bypass, Privilege Escalation
November 14, 2023 at 05:49PM Microsoft released a November update with 63 bug fixes, including three actively exploited zero-day vulnerabilities. One of the bugs, CVE-2023-36036, allows attackers to acquire system-level privileges through Windows Cloud Files Mini Filter Driver. CVE-2023-36033 provides system-level access through the Windows DWM Core Library, and CVE-2023-36025 allows attackers to bypass Windows … Read more