Vulnerabilitycritical

Microsoft Patch Tuesday, January 2023 Edition

Krebs on SecurityJan 11, 2023 · 03:15 UTC (Jan 11, 2023)4 min read1

Read at krebsonsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-21743 CVE-2023-21674 CVE-2023-21678 CVE-2023-21563 CVE-2023-21762 CVE-2023-21745

Tags: cve-2023-21743 cve-2023-21674 cve-2023-21678 cve-2023-21563 cve-2023-21762 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-21678 +1 related CVE CVE-2023-21563	Windows Print Spooler Elevation of Privilege Vulnerability	7.8 group max	<1%		Jan 10, 2023
CVE-2023-21674	Use-After-Free Privilege Escalation in Microsoft Windows ALPC	8.8	34%	KEV	Jan 10, 2023 KEV Jan 10, 2023
CVE-2023-21743	Microsoft SharePoint Server Security Feature Bypass Vulnerability	5.3	1%		Jan 10, 2023
CVE-2023-21762 +1 related CVE CVE-2023-21745	Microsoft Exchange Server Spoofing Vulnerability	8.0	2%		Jan 10, 2023

From the original article

4 min read at krebsonsecurity.com

Microsoft today released updates to fix nearly 100 security flaws in its Windows operating systems and other software. Highlights from the first Patch Tuesday of 2023 include a zero-day vulnerability in Windows, printer software flaws reported by the U. S.

Krebs on Security

krebsonsecurity.com

Read the full article at Krebs on Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.