Microsoft Patch Tuesday for January 2023 fixed actively exploited zero
- CVEs
- CVE-2023-21674CVE-2023-21549CVE-2023-21561CVE-2023-21551CVE-2023-21743CVE-2023-21730CVE-2023-21543CVE-2023-21546CVE-2023-21555CVE-2023-21556CVE-2023-21679CVE-2023-21535CVE-2023-21548CVE-2023-21538CVE-2023-21780CVE-2023-21781CVE-2023-21782CVE-2023-21784CVE-2023-21786CVE-2023-21791CVE-2023-21793CVE-2023-21783CVE-2023-21785CVE-2023-21787CVE-2023-21788CVE-2023-21789CVE-2023-21790CVE-2023-21792CVE-2023-21531CVE-2023-21563CVE-2023-21536CVE-2023-21753CVE-2023-21547CVE-2023-21724CVE-2023-21764CVE-2023-21763CVE-2023-21761CVE-2023-21762CVE-2023-21745CVE-2023-21537CVE-2023-21732CVE-2023-21734CVE-2023-21735CVE-2023-21741CVE-2023-21736CVE-2023-21737CVE-2023-21738CVE-2023-21744CVE-2023-21742CVE-2023-21681CVE-2023-21725CVE-2023-21779CVE-2023-21768CVE-2023-21539CVE-2023-21752CVE-2023-21733CVE-2023-21739CVE-2023-21560CVE-2023-21726CVE-2023-21540CVE-2023-21550
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-21531 | Azure Service Fabric Container Elevation of Privilege Vulnerability | 7.0 | <1% | ||
| CVE-2023-21549 | Windows SMB Witness Service Elevation of Privilege Vulnerability | 8.8 group max | 1% | ||
CVE-2023-21551+3 related CVEs | Microsoft Cryptographic Services Elevation of Privilege Vulnerability | 7.8 group max | <1% | ||
| CVE-2023-21538 | .NET Denial of Service Vulnerability | 7.5 | 3% | ||
CVE-2023-21724+2 related CVEs | Microsoft DWM Core Library Elevation of Privilege Vulnerability | 7.8 group max | <1% | ||
| CVE-2023-21674 | Use-After-Free Privilege Escalation in Microsoft Windows ALPC | 8.8 | 34% | KEV | KEV |
| CVE-2023-21725 | Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability | 6.3 | <1% | ||
| CVE-2023-21734 | Microsoft Office Remote Code Execution Vulnerability | 7.8 group max | <1% | ||
| CVE-2023-21739 | Windows Bluetooth Driver Elevation of Privilege Vulnerability | 7.0 | <1% | ||
CVE-2023-21742+1 related CVE | Microsoft SharePoint Server Remote Code Execution Vulnerability | 8.8 | 56% | ||
| CVE-2023-21743 | Microsoft SharePoint Server Security Feature Bypass Vulnerability | 5.3 | 1% | ||
CVE-2023-21762+4 related CVEs | Microsoft Exchange Server Spoofing Vulnerability | 8.0 group max | 2% | ||
CVE-2023-21752+1 related CVE | Windows Backup Service Elevation of Privilege Vulnerability | 7.1 group max | 5% | ||
| CVE-2023-21768 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | 7.8 | 65% | ||
| CVE-2023-21779 | Visual Studio Code Remote Code Execution Vulnerability | 7.8 | 2% | ||
| CVE-2023-21783 | 3D Builder Remote Code Execution Vulnerability | 7.8 | 1% |
From the original article
7 min read at securityaffairs.com
Microsoft Patch Tuesday security updates for January 2023 fixed 97 flaws and an actively exploited zero-day. Microsoft Patch Tuesday security updates for January 2023 addressed a total of 98 vulnerabilities in Microsoft Windows and Windows Components; Office and Office Components; .
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.