Microsoft Patches MSMQ Denial-of-Service Vulnerabilities

Microsoft disclosed and patched two denial-of-service flaws in Microsoft Message Queuing (MSMQ), tracked as CVE-2023-28302 and CVE-2023-36606, through its Security Update Guide. Both issues affect the Windows messaging component and could allow an attacker to disrupt service availability on systems where MSMQ is enabled.

The vulnerabilities were published in separate Microsoft advisories and add to the security risk surrounding exposed or unnecessary MSMQ deployments. Organizations using MSMQ should review Microsoft’s guidance, apply the relevant security updates, and verify whether the service is required on internet-facing or internal systems to reduce the likelihood of service disruption.