Report Incident
× Home Cybertech Africa 2023 2 DPO Rw-CSIRT Website About Rw-CSIRT Alerts Advisories About NCSA Documentation News & Events Topics Contact us Opportunities Privacy Policy

Alert: Microsoft Security Updates – November 2023

Microsoft has issued security updates to address vulnerabilities in its software products, encompassing, but not limited to:


  • Windows OS: 10 and 11.
  • Windows Server: 2016, 2019, 2022.
  • Microsoft SQL Server: 2019, 2022.
  • Microsoft Exchange Server 2016, 2019.
  • Microsoft Office: 2016, 2019 and Microsoft 365.
  • Microsoft Edge.
The released security updates fix multiple vulnerabilities, which include five zero-day vulnerabilities:
Security Risks
If the identified vulnerabilities in Microsoft products are not patched, this may empower authenticated attackers to remotely take control of vulnerable systems, executing malicious code with elevated privileges.
For the full list of security patches released by Microsoft, please refer to  Microsoft Security Update Guide.
Recommended Actions
The National Cyber Security Authority (NCSA) recommends users and administrators:
1. apply the latest security patches, as soon as possible, to prevent unauthorized control over unpatched systems.
2. upgrade immediately to the latest supported version of installed Microsoft software in order to continue receiving technical support and security patches.
The following Microsoft software products reached their end-of-life and need to be upgraded immediately:
  • Windows Vista, XP, 8 and 7
  • Windows Server 2003, 2003 RE, 2008, 2008 RE, 2008 SP2, 2012 and 2012 R2
  • Exchange Server 2003, 2007, 2010, 2013
  • Microsoft SQL Server 2005, 2008, 2012
  • Microsoft Office 2013
3. Before any updating task, ensure you have a current tested backup of your data.
For further information and support, please contact the National Cyber Security Authority (NCSA) by emailing or calling us on 9009.

Release Note - November 2023

17 November 2023

© 2024 National Cyber Security Authority