2023年09月の Microsoft Update (定例) 2023-09-13 - 取締役平社員ブログ (ベータ版)

CVE-2023-36761 ( Word の情報漏えい ) と CVE-2023-36802 ( Stream Services サービスの脆弱性 ) が 0-Day の模様。

■ https://msrc.microsoft.com/update-guide/ja-JP/releaseNote/2023-Sep
2023 年 9 月のセキュリティ更新プログラム

※ 記載の CVE は 59 個。

https://msrc.microsoft.com/update-guide/ja-jp
セキュリティ更新プログラムガイド

https://msrc.microsoft.com/update-guide/vulnerability
セキュリティ更新プログラムガイド脆弱性

※ 先月の定例以後、新規記載の CVE は 97 個。 ( アーカイブ )

https://support.microsoft.com/en-us/help/5030219
September 12, 2023—KB5030219 (OS Build 22621.2283) Windows 11 version 22H2, all editions

https://support.microsoft.com/en-us/help/5030217
September 12, 2023—KB5030217 (OS Build 22000.2416) Windows 11 version 21H2, all editions

https://support.microsoft.com/en-us/help/5030211
September 12, 2023—KB5030211 (OS Builds 19044.3448 and 19045.3448) Windows 10 Enterprise and Education, version 21H2 Windows 10 IoT Enterprise, version 21H2 Windows 10 Enterprise Multi-Session, version 21H2 Windows 10, version 22H2, all editions

2023年09月の Microsoft Update 。(Windows 10 [22H2])

2023年09月の Microsoft Update 履歴。(Windows 10 [22H2])

※ KB5030211 ( 累積更新 ) と KB5030180 ( NDP 累積更新 ) 。

※ 2023/09/06 付けで KB4023057 ( 更新サービスコンポーネント ) 。

※ 「その他」カテゴリーは KB890830 ( MSRT ) のみ。

2023年09月の Microsoft Update 。(Office 2019 / Office 2016)

※ Version 2308 (Build 16731.20234) / 16.0.16731.20234 。

2023年09月の Microsoft Update 。(Office 2013)

※ 15.0.5589.1001 。 ( KB5002092 )

※ 手元では 15.0.5579.1001 がスキップされました。

ブログ:

https://msrc.microsoft.com/blog/2023/09/202309-security-update/
2023 年 9 月のセキュリティ更新プログラム (月例) | MSRC Blog | Microsoft Security Response Center

https://devblogs.microsoft.com/dotnet/dotnet-framework-september-2023-security-and-quality-rollup-updates/
.NET Framework September 2023 Security and Quality Rollup Updates - .NET Blog

https://devblogs.microsoft.com/dotnet/september-2023-updates/
.NET September 2023 Updates – .NET 7.0.11, .NET 6.0.22 - .NET Blog

https://blogs.windows.com/windows-insider/2023/09/13/announcing-windows-11-insider-preview-build-25951-canary-channel/
https://blogs.windows.com/windows-insider/2023/09/13/announcing-windows-11-insider-preview-build-25951-canary-channel/

https://blogs.windows.com/windows-insider/2023/09/13/announcing-windows-11-insider-preview-build-23545-dev-channel/
https://blogs.windows.com/windows-insider/2023/09/13/announcing-windows-11-insider-preview-build-23545-dev-channel/

https://blogs.windows.com/windows-insider/2023/09/12/announcing-windows-11-insider-preview-build-22621-2338-and-22631-2338-beta-channel/
Announcing Windows 11 Insider Preview Build 22621.2338 and 22631.2338 (Beta Channel) | Windows Insider Blog

https://blogs.windows.com/windows-insider/2023/09/08/announcing-windows-11-insider-preview-build-23541-dev-channel/
https://blogs.windows.com/windows-insider/2023/09/08/announcing-windows-11-insider-preview-build-23541-dev-channel/

https://blogs.windows.com/windows-insider/2023/09/07/background-removal-in-paint-begins-rolling-out-to-windows-insiders/
https://blogs.windows.com/windows-insider/2023/09/07/background-removal-in-paint-begins-rolling-out-to-windows-insiders/

https://blogs.windows.com/windows-insider/2023/09/07/announcing-windows-11-insider-preview-build-25947-canary-channel/
https://blogs.windows.com/windows-insider/2023/09/07/announcing-windows-11-insider-preview-build-25947-canary-channel/

https://blogs.windows.com/windows-insider/2023/09/06/announcing-windows-11-insider-preview-build-22621-2271-and-22631-2271-beta-channel/
Announcing Windows 11 Insider Preview Build 22621.2271 and 22631.2271 (Beta Channel) | Windows Insider Blog

https://blogs.windows.com/windows-insider/2023/08/31/new-updates-for-snipping-tool-and-notepad-for-windows-insiders/
https://blogs.windows.com/windows-insider/2023/08/31/new-updates-for-snipping-tool-and-notepad-for-windows-insiders/

https://blogs.windows.com/windows-insider/2023/08/31/announcing-windows-11-insider-preview-build-25941-canary-channel/
https://blogs.windows.com/windows-insider/2023/08/31/announcing-windows-11-insider-preview-build-25941-canary-channel/

https://blogs.windows.com/windows-insider/2023/08/31/announcing-windows-11-insider-preview-build-23536-dev-channel/
https://blogs.windows.com/windows-insider/2023/08/31/announcing-windows-11-insider-preview-build-23536-dev-channel/

https://blogs.windows.com/windows-insider/2023/08/31/announcing-windows-11-insider-preview-build-22621-2265-and-22631-2265-beta-channel/
Announcing Windows 11 Insider Preview Build 22621.2265 and 22631.2265 (Beta Channel) | Windows Insider Blog

https://blogs.windows.com/windows-insider/2023/08/28/introducing-bing-chat-enterprise-in-the-windows-copilot-preview/
https://blogs.windows.com/windows-insider/2023/08/28/introducing-bing-chat-enterprise-in-the-windows-copilot-preview/

https://blogs.windows.com/windows-insider/2023/08/25/announcing-windows-11-insider-preview-build-23531-dev-channel/
https://blogs.windows.com/windows-insider/2023/08/25/announcing-windows-11-insider-preview-build-23531-dev-channel/

ダウンロードサイトなど:

■ Windows 11

https://catalog.update.microsoft.com/Search.aspx?q=KB5030219

https://catalog.update.microsoft.com/Search.aspx?q=KB5030217

https://catalog.update.microsoft.com/Search.aspx?q=KB5031217

https://catalog.update.microsoft.com/Search.aspx?q=KB5030181

https://catalog.update.microsoft.com/Search.aspx?q=%22.NET%20%22%202023-09

https://catalog.update.microsoft.com/Search.aspx?q=%22.NET+Framework%22+2023-09+Windows+11

https://catalog.update.microsoft.com/Search.aspx?q=KB5012170

■ Windows 10

https://catalog.update.microsoft.com/Search.aspx?q=KB5030211

https://catalog.update.microsoft.com/Search.aspx?q=KB5030180

https://catalog.update.microsoft.com/Search.aspx?q=%22.NET%20%22%202023-09

https://catalog.update.microsoft.com/Search.aspx?q=KB5012170

■ その他

https://catalog.update.microsoft.com/Search.aspx?q=KB890830

https://www.microsoft.com/ja-jp/download/confirmation.aspx?id=9905
Windows 悪意のあるソフトウェアの削除ツール (64-bit)

https://www.microsoft.com/ja-jp/download/confirmation.aspx?id=16
Windows 悪意のあるソフトウェアの削除ツール (32-bit)

※ 09月版は v5.117 。

・・・

https://learn.microsoft.com/en-us/officeupdates/update-history-office-2021
Update history for Office LTSC 2021 and Office 2021 - Office release notes | Microsoft Learn

※ "September 12, 2023 Version 2308 (Build 16731.20234)" 。 ( アーカイブ )

https://learn.microsoft.com/en-us/officeupdates/update-history-office-2019
Update history for Office 2016 C2R and Office 2019 - Office release notes | Microsoft Learn

※ "September 12, 2023 Version 2308 (Build 16731.20234)" 。 ( アーカイブ )

https://learn.microsoft.com/en-us/officeupdates/update-history-microsoft365-apps-by-date
Update history for Microsoft 365 Apps (listed by date) - Office release notes | Microsoft Learn

※ "2023 September 12 Version 2308 (Build 16731.20234)" 。 ( アーカイブ )

https://learn.microsoft.com/en-us/officeupdates/current-channel
Release notes for Current Channel releases - Office release notes | Microsoft Learn

※ "Version 2308: September 12" 。 ( アーカイブ )

https://learn.microsoft.com/en-us/officeupdates/msp-files-office-2016
List of the most current .msp files for Office 2016 products - Office release notes | Microsoft Learn

※ "08/31/2023" 。 ( アーカイブ )

https://learn.microsoft.com/en-us/officeupdates/update-history-office-2013
Update history for Office 2013 - Office release notes | Microsoft Learn

※ "2023 September 12 15.0.5589.1001 KB 5002092" まで。 ( アーカイブ )

※ "24-Jul-2023" 。 ( アーカイブ )

https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security
Release notes for Microsoft Edge Security Updates | Microsoft Learn

※ "September 12, 2023" 。 "Version 116.0.1938.81" 。

https://msrc.microsoft.com/update-guide/vulnerability/ADV990001
ADV990001 | 最新のサービススタック更新プログラム

https://support.microsoft.com/en-us/help/5029368/servicing-stack-update
KB5029368: Servicing stack update for Windows Server 2012 R2: August 8, 2023

https://support.microsoft.com/en-us/help/5028264/servicing-stack-update
KB5028264: Servicing stack update for Windows Server 2008 R2 SP1: July 11, 2023 Windows Server 2008 R2 Enterprise ESU Windows Server 2008 R2 Standard ESU Windows Server 2008 R2 Datacenter ESU

https://support.microsoft.com/en-us/help/5031217/
September 12, 2023-KB5031217 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 22H2

https://support.microsoft.com/en-us/help/5030181/
September 12, 2023-KB5030181 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11, version 21H2

https://support.microsoft.com/en-us/help/5030180/
September 12, 2023-KB5030180 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

https://support.microsoft.com/en-us/help/5030184/
September 12, 2023-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 (KB5030184)

https://support.microsoft.com/en-us/help/5030182/
September 12, 2023-Security and Quality Rollup for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 (KB5030182)

・・・

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36802
Microsoft Stream Services サービスのプロキシの特権の昇格の脆弱性

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36761
Microsoft Word の情報漏えいの脆弱性

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24936
.NET、.NET Framework、Visual Studio の特権の昇格の脆弱性

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32051
Raw Image Extension Remote Code Execution Vulnerability

https://support.microsoft.com/en-us/help/5030209/
KB5030209: Cumulative security update for Internet Explorer: September 12, 2023

※ カタログ。

https://support.microsoft.com/en-us/help/894199/
Description of Software Update Services and Windows Server Update Services changes in content for 2023 (KB894199)

※ "Tuesday, September 12, 2023" 。 ( アーカイブ )

https://learn.microsoft.com/ja-jp/lifecycle/end-of-support/end-of-support-2023
Products Ending Support in 2023

・・・

https://support.microsoft.com/en-us/help/5030269
September 12, 2023—KB5030269 (Monthly Rollup) Windows Server 2012 R2

https://catalog.update.microsoft.com/Search.aspx?q=KB5030269

https://catalog.update.microsoft.com/Search.aspx?q=KB5030184

https://catalog.update.microsoft.com/Search.aspx?q=%22.NET%20%22%202023-09

https://catalog.update.microsoft.com/Search.aspx?q=%22Windows+8.1%22+%22.NET%22

https://catalog.update.microsoft.com/Search.aspx?q=KB5029368

https://catalog.update.microsoft.com/Search.aspx?q=KB5030287 ( SO )

https://catalog.update.microsoft.com/Search.aspx?q=KB5012170

https://support.microsoft.com/en-us/help/5030265
September 12, 2023—KB5030265 (Monthly Rollup) Windows Server 2008 R2 Enterprise ESU Windows Server 2008 R2 Standard ESU Windows Server 2008 R2 Datacenter ESU Windows Embedded Standard 7 ESU Windows Embedded POSReady 7 ESU

・・・

セキュmemo さんの該当ページ。

・・・

https://www.jpcert.or.jp/at/2023/at230019.html
2023年9月マイクロソフトセキュリティ更新プログラムに関する注意喚起

※ 記載の CVE は 2 個。

http://jvn.jp/vu/JVNVU99796803/
JVNVU#99796803: Intel製品に複数の脆弱性（2023年8月）

https://forest.watch.impress.co.jp/docs/news/1530925.html
2023年9月の「Windows Update」が公開～ゼロデイ2件を含む59件の脆弱性に対処 - 窓の杜

※ "2023年9月13日" 付け。

https://forest.watch.impress.co.jp/docs/news/1530922.html
「Microsoft Edge」でも深刻度「Critical」のゼロデイ脆弱性が修正 - 窓の杜

※ "2023年9月13日" 付け。

https://forest.watch.impress.co.jp/docs/news/1529915.html
「Microsoft Edge」に4件の脆弱性～最大深刻度「High」、「Chrome」に2日遅れで追随 - 窓の杜

※ "2023年9月8日" 付け。

https://forest.watch.impress.co.jp/docs/news/1526609.html
「Microsoft Edge 116」にセキュリティ更新～「Google Chrome」に3日遅れで追随 - 窓の杜

※ "2023年8月28日" 付け。

https://forest.watch.impress.co.jp/docs/news/1525870.html
Intel CPUから機密情報が漏洩する「Downfall」脆弱性、Microsoftが軽減策・解除方法を案内 - 窓の杜

※ "2023年8月24日" 付け。

https://isc.sans.edu/diary/Microsoft+September+2023+Patch+Tuesday/30214/
Microsoft September 2023 Patch Tuesday - SANS Internet Storm Center

・・・

https://tsusuzuki.hatenadiary.jp/entry/2023/08/30/010000
2023年08月の Microsoft Update (定例外) 2023-08-29 - 取締役平社員ブログ (ベータ版)

https://tsusuzuki.hatenadiary.jp/entry/2023/08/24/180000
2023年08月の Microsoft Update (定例外) 2023-08-23 - 取締役平社員ブログ (ベータ版)

https://tsusuzuki.hatenadiary.jp/entry/2023/08/11/200000
2023年08月の Microsoft Update (定例) 2023-08-09 - 取締役平社員ブログ (ベータ版)

https://tsusuzuki.hatenadiary.jp/entry/2023/07/28/220000
2023年07月の Microsoft Update (定例外) 2023-07-28 - 取締役平社員ブログ (ベータ版)

https://tsusuzuki.hatenadiary.jp/entry/2023/07/27/060000
2023年07月の Microsoft Update (定例外) 2023-07-27 - 取締役平社員ブログ (ベータ版)

https://tsusuzuki.hatenadiary.jp/entry/2023/07/27/010000
2023年07月の Microsoft Update (定例外) 2023-07-26 - 取締役平社員ブログ (ベータ版)

https://tsusuzuki.hatenadiary.jp/entry/2023/07/20/210000
2023年07月の Microsoft Update (定例) 2023-07-12 - 取締役平社員ブログ (ベータ版)

いじょうです。