Vulnerabilitycritical

Microsoft Patch Tuesday, February 2023 Edition

Krebs on SecurityFeb 15, 2023 · 00:00 UTC (Feb 15, 2023)4 min read

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-23376 CVE-2023-21715 CVE-2023-21823 CVE-2023-21716 CVE-2023-21706 CVE-2023-21707 CVE-2023-21529

Tags: cve-2023-23376 cve-2023-21715 cve-2023-21823 cve-2023-21716 cve-2023-21706 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-21529 +2 related CVEs CVE-2023-21707 CVE-2023-21706	Authenticated Deserialization RCE in Microsoft Exchange Server (CVE-2023-21529)	8.8	59%	KEVRansomware	Feb 14, 2023 KEV Apr 13, 2026
CVE-2023-21715 +1 related CVE CVE-2023-21716	Actively Exploited Security Feature Bypass in Microsoft Office Publisher	7.3 group max	12%	KEV	Feb 14, 2023 KEV Feb 14, 2023
CVE-2023-23376 +1 related CVE CVE-2023-21823	Out-of-Bounds Write Privilege Escalation in Microsoft Windows CLFS Driver	7.8	11%	KEVRansomware	Feb 14, 2023 KEV Feb 14, 2023

From the original article

4 min read at krebsonsecurity.com

Microsoft is sending the world a whole bunch of love today, in the form of patches to plug dozens of security holes in its Windows operating systems and other software. This year’s special Valentine’s Day Patch Tuesday includes fixes for a whopping three different “zero-day” vulnerabilities that are already being used in active attacks.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.