Microsoft Issues January 2023 Patch Tuesday Updates, Warns of Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2022-41045+2 related CVEs | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | 7.8 | <1% | ||
CVE-2022-41080+1 related CVE | Microsoft Exchange Server Privilege Escalation Exploited in Ransomware Campaigns | 8.8 group max | 77% | KEVRansomware | KEV |
| CVE-2022-41082 | Authenticated RCE in Microsoft Exchange Server (ProxyNotShell) | 8.0 | 100% | KEVRansomwarePoC | KEV |
| CVE-2023-21549 | Windows SMB Witness Service Elevation of Privilege Vulnerability | 8.8 group max | 1% | ||
| CVE-2023-21674 | Use-After-Free Privilege Escalation in Microsoft Windows ALPC | 8.8 | 34% | KEV | KEV |
| CVE-2023-21743 | Microsoft SharePoint Server Security Feature Bypass Vulnerability | 5.3 | 1% | ||
CVE-2023-21763+1 related CVE | Microsoft Exchange Server Elevation of Privilege Vulnerability | 7.8 | <1% |
From the original article
4 min read at thehackernews.com
The first Patch Tuesday fixes shipped by Microsoft for 2023 have addressed a total of 98 security flaws , including one bug that the company said is being actively exploited in the wild. 11 of the 98 issues are rated Critical and 87 are rated Important in severity, with one of the vulnerabilities also listed as publicly known at the time of release.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.