# MS 8월 보안 위협에 따른 정기 보안 업데이트 권고\[2023-08]

## MS 8월 보안 위협에 따른 정기 보안 업데이트 권고

### □ 8 월 보안업데이트 개요 (총 15 종 )

o 등급 : 긴급 (Critical) 9 종 , 중요 (Important) 6 종 o 발표일 : 2023.08.08.(화) o 업데이트 내용

<table><thead><tr><th width="438">제품군</th><th width="113.33333333333331">중요도</th><th>영향</th></tr></thead><tbody><tr><td>Windows 11 v22H2, Windows 11 v21H2</td><td>긴급</td><td>권한 상승</td></tr><tr><td>Windows 10 22H2, Windows 10 21H2</td><td>긴급</td><td>권한 상승</td></tr><tr><td>Windows Server 2022</td><td>긴급</td><td>권한 상승</td></tr><tr><td>Windows Server 2019</td><td>긴급</td><td>권한 상승</td></tr><tr><td>Windows Server 2016</td><td>긴급</td><td>정보 유출</td></tr><tr><td>Windows Server 2012 R2</td><td>긴급</td><td>원격 코드 실행</td></tr><tr><td>Windows Server 2012</td><td>긴급</td><td>원격 코드 실행</td></tr><tr><td>Microsoft Office</td><td>긴급</td><td>원격 코드 실행</td></tr><tr><td>Microsoft SharePoint</td><td>긴급</td><td>정보 유출</td></tr><tr><td>Microsoft .NET</td><td>중요</td><td>서비스 거부</td></tr><tr><td>Microsoft Exchange Server</td><td>중요</td><td>원격 코드 실행</td></tr><tr><td>Microsoft Visual Studio</td><td>중요</td><td>서비스 거부</td></tr><tr><td>Microsoft Dynamics 365</td><td>중요</td><td>원격 코드 실행</td></tr><tr><td>Microsoft Azure 관련 소프트웨어</td><td>중요</td><td>스푸핑</td></tr><tr><td>Windows Defender 맬웨어 방지 플랫폼</td><td>중요</td><td>권한 상승</td></tr></tbody></table>

### \[참고 사이트 ]&#x20;

\[1] (한글) <https://portal.msrc.microsoft.com/ko-kr/security-guidance&#x20>;

\[2] (영문) <https://portal.msrc.microsoft.com/en-us/security-guidance&#x20>;

\[3] <https://msrc.microsoft.com/update-guide/releaseNote/2023-Aug&#x20>;

\[4] <https://msrc.microsoft.com/update-guide>

### o 취약점 요약 정보

<table><thead><tr><th>제품 카테고리</th><th width="179.33333333333331">CVE  번호</th><th>CVE  제목</th></tr></thead><tbody><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4078">CVE-2023-4078</a></td><td>Chromium: CVE-2023-4078 확장에서 부적절한 구현</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4077">CVE-2023-4077</a></td><td>Chromium: CVE-2023-4077 확장에서 불충분한 데이터 유효성 검사</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4076">CVE-2023-4076</a></td><td>Chromium: CVE-2023-4076 WebRTC에서 UaF(Use after free)</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4075">CVE-2023-4075</a></td><td>Chromium: CVE-2023-4075 캐스팅에서 UaF(Use after free)</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4074">CVE-2023-4074</a></td><td>Chromium: CVE-2023-4074 Blink Task Scheduling에서 UaF(Use after free)</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4073">CVE-2023-4073</a></td><td>Chromium: CVE-2023-4073 ANGLE에서 범위를 벗어난 메모리 액세스</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4072">CVE-2023-4072</a></td><td>Chromium: CVE-2023-4072 WebGL에서 범위를 벗어난 읽기와 쓰기</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4071">CVE-2023-4071</a></td><td>Chromium: CVE-2023-4071 Visuals에서 힙 버퍼 오버플로</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4070">CVE-2023-4070</a></td><td>Chromium: CVE-2023-4070 V8에서 유형 혼란</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4069">CVE-2023-4069</a></td><td>Chromium: CVE-2023-4069 V8에서 유형 혼란</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4068">CVE-2023-4068</a></td><td>Chromium: CVE-2023-4068 V8에서 유형 혼란</td></tr><tr><td>Windows Message Queuing</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38254">CVE-2023-38254</a></td><td>Microsoft 메시지 큐 서비스 거부 취약성</td></tr><tr><td>Azure HDInsights</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38188">CVE-2023-38188</a></td><td>Azure Apache Hadoop 스푸핑 취약성</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38187">CVE-2023-38187</a></td><td>Microsoft Edge(Chromium 기반) 권한 상승 취약성</td></tr><tr><td>Windows Mobile Device Management</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38186">CVE-2023-38186</a></td><td>Windows 모바일 장치 관리 권한 상승 취약성</td></tr><tr><td>Microsoft Exchange Server</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38185">CVE-2023-38185</a></td><td>Microsoft Exchange Server 원격 코드 실행 취약성</td></tr><tr><td>Windows LDAP - Lightweight Directory Access Protocol</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38184">CVE-2023-38184</a></td><td>Windows LDAP(Lightweight Directory Access Protocol) 원격 코드 실행 취약성</td></tr><tr><td>Microsoft Exchange Server</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38182">CVE-2023-38182</a></td><td>Microsoft Exchange Server 원격 코드 실행 취약성</td></tr><tr><td>Microsoft Exchange Server</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38181">CVE-2023-38181</a></td><td>Microsoft Exchange Server 스푸핑 취약성</td></tr><tr><td>ASP .NET</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38180">CVE-2023-38180</a></td><td>.NET and Visual Studio Denial of Service Vulnerability</td></tr><tr><td>.NET Core</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38178">CVE-2023-38178</a></td><td>.NET Core 및 Visual Studio 서비스 거부 취약성</td></tr><tr><td>Azure Arc</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38176">CVE-2023-38176</a></td><td>Azure Arc 지원 서버 권한 상승 취약성</td></tr><tr><td>Windows Defender</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38175">CVE-2023-38175</a></td><td>Microsoft Windows Defender 권한 상승 취약성</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38173">CVE-2023-38173</a></td><td>Android용 Microsoft Edge 스푸핑 취약성</td></tr><tr><td>Windows Message Queuing</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38172">CVE-2023-38172</a></td><td>Microsoft 메시지 큐 서비스 거부 취약성</td></tr><tr><td>Microsoft Windows Codecs Library</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38170">CVE-2023-38170</a></td><td>HEVC 비디오 확장 원격 코드 실행 취약성</td></tr><tr><td>SQL Server</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38169">CVE-2023-38169</a></td><td>Microsoft OLE DB 원격 코드 실행 취약성</td></tr><tr><td>Dynamics Business Central Control</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38167">CVE-2023-38167</a></td><td>Microsoft Dynamics Business Central 권한 상승 취약성</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38157">CVE-2023-38157</a></td><td>Microsoft Edge(Chromium 기반) 보안 기능 우회 취약성</td></tr><tr><td>Windows Kernel</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38154">CVE-2023-38154</a></td><td>Windows 커널 권한 상승 취약성</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-3740">CVE-2023-3740</a></td><td>Chromium: CVE-2023-3740 테마에서 신뢰할 수 없는 입력에 대한 불충분한 유효성 검사</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-3738">CVE-2023-3738</a></td><td>Chromium: CVE-2023-3738 자동 채우기에서 부적절한 구현</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-3737">CVE-2023-3737</a></td><td>Chromium: CVE-2023-3737 알림에서 부적절한 구현</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-3736">CVE-2023-3736</a></td><td>Chromium: CVE-2023-3736 사용자 지정 탭에서 부적절한 구현</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-3735">CVE-2023-3735</a></td><td>Chromium: CVE-2023-3735 Web API 권한 프롬프트에서 부적절한 구현</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-3734">CVE-2023-3734</a></td><td>Chromium: CVE-2023-3734 화면 속 화면에서 부적절한 구현</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-3733">CVE-2023-3733</a></td><td>Chromium: CVE-2023-3733 WebApp Installs에서 부적절한 구현</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-3732">CVE-2023-3732</a></td><td>Chromium: CVE-2023-3732 Mojo에서 범위를 벗어난 메모리 액세스</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-3730">CVE-2023-3730</a></td><td>Chromium: CVE-2023-3730 탭 그룹에서 UaF(Use after free)</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-3728">CVE-2023-3728</a></td><td>Chromium: CVE-2023-3728 WebRTC에서 UaF(Use after free)</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-3727">CVE-2023-3727</a></td><td>Chromium: CVE-2023-3727 WebRTC에서 UaF(Use after free)</td></tr><tr><td>Windows Smart Card</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36914">CVE-2023-36914</a></td><td>Windows 스마트 카드 리소스 관리 서버 보안 기능 바이패스 취약성</td></tr><tr><td>Windows Message Queuing</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36913">CVE-2023-36913</a></td><td>Microsoft 메시지 큐 정보 유출 취약성</td></tr><tr><td>Windows Message Queuing</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36912">CVE-2023-36912</a></td><td>Microsoft 메시지 큐 서비스 거부 취약성</td></tr><tr><td>Windows Message Queuing</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36911">CVE-2023-36911</a></td><td>Microsoft 메시지 큐 원격 코드 실행 취약성</td></tr><tr><td>Windows Message Queuing</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36910">CVE-2023-36910</a></td><td>Microsoft 메시지 큐 원격 코드 실행 취약성</td></tr><tr><td>Windows Message Queuing</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36909">CVE-2023-36909</a></td><td>Microsoft 메시지 큐 서비스 거부 취약성</td></tr><tr><td>Role: Windows Hyper-V</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36908">CVE-2023-36908</a></td><td>Windows Hyper-V 정보 유출 취약성</td></tr><tr><td>Windows Cryptographic Services</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36907">CVE-2023-36907</a></td><td>Windows 암호화 서비스 정보 공개 취약성</td></tr><tr><td>Windows Cryptographic Services</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36906">CVE-2023-36906</a></td><td>Windows 암호화 서비스 정보 공개 취약성</td></tr><tr><td>Windows Wireless Wide Area Network Service</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36905">CVE-2023-36905</a></td><td>Windows WwanSvc(Wireless Wide Area Network Service) 정보 공개 취약성</td></tr><tr><td>Windows Cloud Files Mini Filter Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36904">CVE-2023-36904</a></td><td>Windows 클라우드 파일 미니 필터 드라이버 권한 상승 취약성</td></tr><tr><td>Windows System Assessment Tool</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36903">CVE-2023-36903</a></td><td>Windows 시스템 평가 도구 권한 상승 취약성</td></tr><tr><td>Windows Common Log File System Driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36900">CVE-2023-36900</a></td><td>Windows 공용 로그 파일 시스템 드라이버 권한 상승 취약성</td></tr><tr><td>ASP.NET</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36899">CVE-2023-36899</a></td><td>ASP.NET 권한 상승 취약성</td></tr><tr><td>Tablet Windows User Interface</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36898">CVE-2023-36898</a></td><td>Tablet Windows User Interface Application Core 권한 상승 취약성</td></tr><tr><td>Microsoft Office</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36897">CVE-2023-36897</a></td><td>Visual Studio Tools for Office 런타임 스푸핑 취약성</td></tr><tr><td>Microsoft Office Excel</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36896">CVE-2023-36896</a></td><td>Microsoft Excel 원격 코드 실행 취약성</td></tr><tr><td>Microsoft Office Outlook</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36895">CVE-2023-36895</a></td><td>Microsoft Outlook 원격 코드 실행 취약성</td></tr><tr><td>Microsoft Office SharePoint</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36894">CVE-2023-36894</a></td><td>Microsoft SharePoint Server 정보 유출 취약성</td></tr><tr><td>Microsoft Office Outlook</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36893">CVE-2023-36893</a></td><td>Microsoft Outlook 스푸핑 취약성</td></tr><tr><td>Microsoft Office SharePoint</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36892">CVE-2023-36892</a></td><td>Microsoft SharePoint Server 스푸핑 취약성</td></tr><tr><td>Microsoft Office SharePoint</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36891">CVE-2023-36891</a></td><td>Microsoft SharePoint Server 스푸핑 취약성</td></tr><tr><td>Microsoft Office SharePoint</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36890">CVE-2023-36890</a></td><td>Microsoft SharePoint Server 정보 유출 취약성</td></tr><tr><td>Windows Group Policy</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36889">CVE-2023-36889</a></td><td>Windows 그룹 정책 보안 기능 바이패스 취약성</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36888">CVE-2023-36888</a></td><td>Android용 Microsoft Edge(Chromium 기반) 변조 취약성</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36887">CVE-2023-36887</a></td><td>Microsoft Edge(Chromium 기반) 원격 코드 실행 취약성</td></tr><tr><td>Microsoft Windows Search Component</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884">CVE-2023-36884</a></td><td>Windows Search Remote Code Execution Vulnerability</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36883">CVE-2023-36883</a></td><td>iOS용 Microsoft Edge 스푸핑 취약성</td></tr><tr><td>Microsoft WDAC OLE DB provider for SQL</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36882">CVE-2023-36882</a></td><td>SQL Server용 Microsoft WDAC OLE DB 공급자 원격 코드 실행 취약성</td></tr><tr><td>Azure HDInsights</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36881">CVE-2023-36881</a></td><td>Azure Apache Ambari 스푸핑 취약성</td></tr><tr><td>Azure HDInsights</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36877">CVE-2023-36877</a></td><td>Azure Apache Oozie 스푸핑 취약성</td></tr><tr><td>Reliability Analysis Metrics Calculation Engine</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36876">CVE-2023-36876</a></td><td>RacTask(Reliability Analysis Metrics Calculation) 권한 상승 취약성</td></tr><tr><td>.NET Framework</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36873">CVE-2023-36873</a></td><td>.NET Framework 스푸핑 취약성</td></tr><tr><td>Azure DevOps</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36869">CVE-2023-36869</a></td><td>Azure DevOps Server 스푸핑 취약성</td></tr><tr><td>Microsoft Office Visio</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36866">CVE-2023-36866</a></td><td>Microsoft Office Visio 원격 코드 실행 취약성</td></tr><tr><td>Microsoft Office Visio</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36865">CVE-2023-36865</a></td><td>Microsoft Office Visio 원격 코드 실행 취약성</td></tr><tr><td>Azure HDInsights</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35394">CVE-2023-35394</a></td><td>Azure HDInsight Jupyter Notebook 스푸핑 취약성</td></tr><tr><td>Azure HDInsights</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35393">CVE-2023-35393</a></td><td>Azure Apache Hive 스푸핑 취약성</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35392">CVE-2023-35392</a></td><td>Microsoft Edge(Chromium 기반) 스푸핑 취약성</td></tr><tr><td>ASP.NET and Visual Studio</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35391">CVE-2023-35391</a></td><td>ASP.NET Core SignalR 및 Visual Studio 정보 공개 취약성</td></tr><tr><td>.NET Core</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35390">CVE-2023-35390</a></td><td>.NET 및 Visual Studio 원격 코드 실행 취약성</td></tr><tr><td>Microsoft Dynamics</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35389">CVE-2023-35389</a></td><td>Microsoft Dynamics 365 온-프레미스 원격 코드 실행 취약성</td></tr><tr><td>Microsoft Exchange Server</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35388">CVE-2023-35388</a></td><td>Microsoft Exchange Server 원격 코드 실행 취약성</td></tr><tr><td>Windows Bluetooth A2DP driver</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35387">CVE-2023-35387</a></td><td>Windows Bluetooth A2DP 드라이버 권한 상승 취약성</td></tr><tr><td>Windows Kernel</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35386">CVE-2023-35386</a></td><td>Windows 커널 권한 상승 취약성</td></tr><tr><td>Windows Message Queuing</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35385">CVE-2023-35385</a></td><td>Microsoft 메시지 큐 원격 코드 실행 취약성</td></tr><tr><td>Windows HTML Platform</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35384">CVE-2023-35384</a></td><td>Windows HTML 플랫폼 보안 기능 우회 취약성</td></tr><tr><td>Windows Message Queuing</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35383">CVE-2023-35383</a></td><td>Microsoft 메시지 큐 정보 유출 취약성</td></tr><tr><td>Windows Kernel</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35382">CVE-2023-35382</a></td><td>Windows 커널 권한 상승 취약성</td></tr><tr><td>Windows Fax and Scan Service</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35381">CVE-2023-35381</a></td><td>Windows Fax 서비스 원격 코드 실행 취약성</td></tr><tr><td>Windows Kernel</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35380">CVE-2023-35380</a></td><td>Windows 커널 권한 상승 취약성</td></tr><tr><td>Windows Reliability Analysis Metrics Calculation Engine</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35379">CVE-2023-35379</a></td><td>RACEng(Reliability Analysis Metrics Calculation Engine) 권한 상승 취약성</td></tr><tr><td>Windows Projected File System</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35378">CVE-2023-35378</a></td><td>Windows 예상 파일 시스템 권한 상승 취약성</td></tr><tr><td>Windows Message Queuing</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35377">CVE-2023-35377</a></td><td>Microsoft 메시지 큐 서비스 거부 취약성</td></tr><tr><td>Windows Message Queuing</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35376">CVE-2023-35376</a></td><td>Microsoft 메시지 큐 서비스 거부 취약성</td></tr><tr><td>Microsoft Office Visio</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35372">CVE-2023-35372</a></td><td>Microsoft Office Visio 원격 코드 실행 취약성</td></tr><tr><td>Microsoft Office Excel</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35371">CVE-2023-35371</a></td><td>Microsoft Office 원격 코드 실행 취약성</td></tr><tr><td>Microsoft Exchange Server</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35368">CVE-2023-35368</a></td><td>Microsoft Exchange 원격 코드 실행 취약성</td></tr><tr><td>Windows Kernel</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35359">CVE-2023-35359</a></td><td>Windows 커널 권한 상승 취약성</td></tr><tr><td>Microsoft Office Outlook</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35311">CVE-2023-35311</a></td><td>Microsoft Outlook 보안 기능 바이패스 취약성</td></tr><tr><td>Microsoft Office Outlook</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33151">CVE-2023-33151</a></td><td>Microsoft Outlook 스푸핑 취약성</td></tr><tr><td>Microsoft Office OneNote</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33140">CVE-2023-33140</a></td><td>Microsoft OneNote 스푸핑 취약성</td></tr><tr><td>.NET and Visual Studio</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33127">CVE-2023-33127</a></td><td>.NET 및 Visual Studio 권한 상승 취약성</td></tr><tr><td>SQL Server</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32027">CVE-2023-32027</a></td><td>SQL Server용 Microsoft ODBC 드라이버 원격 코드 실행 취약성</td></tr><tr><td>SQL Server</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32026">CVE-2023-32026</a></td><td>SQL Server용 Microsoft ODBC 드라이버 원격 코드 실행 취약성</td></tr><tr><td>SQL Server</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32025">CVE-2023-32025</a></td><td>SQL Server용 Microsoft ODBC 드라이버 원격 코드 실행 취약성</td></tr><tr><td>Microsoft Teams</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29330">CVE-2023-29330</a></td><td>Microsoft Teams 원격 코드 실행 취약성</td></tr><tr><td>Microsoft Teams</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29328">CVE-2023-29328</a></td><td>Microsoft Teams 원격 코드 실행 취약성</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28261">CVE-2023-28261</a></td><td>Microsoft Edge(Chromium 기반) 권한 상승 취약성</td></tr><tr><td>.NET and Visual Studio</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24936">CVE-2023-24936</a></td><td>.NET, .NET Framework, Visual Studio 권한 상승 취약성</td></tr><tr><td>Windows Secure Boot</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24932">CVE-2023-24932</a></td><td>보안 부팅 보안 기능 우회 취약성</td></tr><tr><td>Microsoft Teams</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24881">CVE-2023-24881</a></td><td>Microsoft Teams 정보 공개 취약성</td></tr><tr><td>Microsoft Exchange Server</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21709">CVE-2023-21709</a></td><td>Microsoft Exchange Server 권한 상승 취약성</td></tr><tr><td>Azure Service Fabric Container</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21531">CVE-2023-21531</a></td><td>Azure Service Fabric Container 권한 상승 취약성</td></tr><tr><td>Microsoft Windows</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-20569">CVE-2023-20569</a></td><td>AMD: CVE-2023-20569 리턴 주소 예측자</td></tr><tr><td>Windows Netlogon</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38023">CVE-2022-38023</a></td><td>Netlogon RPC 권한 상승 취약성</td></tr><tr><td>Windows Kerberos</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37967">CVE-2022-37967</a></td><td>Windows Kerberos 권한 상승 취약성</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29144">CVE-2022-29144</a></td><td>Microsoft Edge(Chromium 기반) 권한 상승 취약성</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-42307">CVE-2021-42307</a></td><td>Microsoft Edge(Chromium 기반) 정보 공개 취약성</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34506">CVE-2021-34506</a></td><td>Microsoft Edge(Chromium 기반) 보안 기능 우회 취약성</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34475">CVE-2021-34475</a></td><td>Microsoft Edge(Chromium 기반) 권한 상승 취약성</td></tr><tr><td>Microsoft Edge (Chromium-based)</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-31982">CVE-2021-31982</a></td><td>Microsoft Edge(Chromium 기반) 보안 기능 우회 취약성</td></tr><tr><td>Azure</td><td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-27075">CVE-2021-27075</a></td><td>Azure 가상 컴퓨터 정보 유출 취약성</td></tr></tbody></table>

### □ 작성 : \[KISA] 취약점분석팀

## 출처 : [KISA 바로가기](https://www.krcert.or.kr/kr/bbs/view.do?searchCnd=\&bbsId=B0000133\&searchWrd=\&menuNo=205020\&pageIndex=1\&categoryCode=\&nttId=71167)

{% embed url="<https://doc.skill.or.kr>" %}
NHN Cloud 정보 사이트&#x20;
{% endembed %}

{% embed url="<https://ssv.skill.or.kr>" %}
취약점 진단 분석 평가 방법 사이트&#x20;
{% endembed %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://sul.skill.or.kr/sw-hw-update-list/2023/ms-update-2023-02.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.