Over 100 CVEs Addressed in First Patch Tuesday of 2023
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-41123 | Microsoft Exchange Server Elevation of Privilege Vulnerability | 7.8 | <1% | ||
| CVE-2023-21549 | Windows SMB Witness Service Elevation of Privilege Vulnerability | 8.8 | 1% | ||
| CVE-2023-21674 | Use-After-Free Privilege Escalation in Microsoft Windows ALPC | 8.8 | 34% | KEV | KEV |
| CVE-2023-21743 | Microsoft SharePoint Server Security Feature Bypass Vulnerability | 5.3 | 1% | ||
CVE-2023-21763+1 related CVE | Microsoft Exchange Server Elevation of Privilege Vulnerability | 7.8 | <1% |
From the original article
2 min read at infosecurity-magazine.com
Microsoft has addressed over 100 common vulnerabilities and exposures (CVE) in the first Patch Tuesday of 2023 . Of the 101 CVEs resolved, 98 were new while three were revised from November and December 2022 patches. The majority of CVEs relate to Windows OS updates, meaning this area should be a high priority for security teams this month.
By James Coker · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.