2023年2月16日星期四

Microsoft Monthly Security Update (February 2023)

Release Date: 15 Feb 2023

RISK: Extremely High Risk

TYPE: Operating Systems - Windows OS

TYPE: Windows OS

Microsoft has released monthly security update for their products:

 

Vulnerable ProductRisk LevelImpactsNotes
SQL ServerMedium Risk Medium RiskRemote Code Execution
Spoofing
 
WindowsExtremely High Risk Extremely High RiskRemote Code Execution
Elevation of Privilege
Denial of Service
Information Disclosure

Exploit in the wild

CVE-2023-21823

CVE-2023-23376

Extended Security Updates (ESU)Extremely High Risk Extremely High RiskRemote Code Execution
Elevation of Privilege
Denial of Service
Information Disclosure

Exploit in the wild

CVE-2023-21823

CVE-2023-23376

AzureMedium Risk Medium RiskElevation of Privilege
Information Disclosure
Remote Code Execution
Spoofing
 
Microsoft DynamicsMedium Risk Medium RiskRemote Code Execution
Spoofing
 
BrowserMedium Risk Medium RiskSpoofing
Data Manipulation
Remote Code Execution
 
Exchange ServerMedium Risk Medium RiskRemote Code Execution 
Microsoft OfficeExtremely High Risk Extremely High RiskSpoofing
Remote Code Execution
Elevation of Privilege
Information Disclosure
Security Restriction Bypass

Exploit in the wild

CVE-2023-21823

CVE-2023-21715

Developer ToolsMedium Risk Medium RiskElevation of Privilege
Denial of Service
Remote Code Execution
 
AppsMedium Risk Medium RiskRemote Code Execution 
System CenterMedium Risk Medium RiskElevation of Privilege
Security Restriction Bypass
 
DeviceMedium Risk Medium RiskInformation Disclosure 

 

Number of 'Extremely High Risk' product(s): 3

Number of 'High Risk' product(s): 0

Number of 'Medium Risk' product(s): 9

Number of 'Low Risk' product(s): 0

Evaluation of overall 'Risk Level': Extremely High Risk


Impact

  • Denial of Service
  • Remote Code Execution
  • Spoofing
  • Elevation of Privilege
  • Information Disclosure
  • Data Manipulation
  • Security Restriction Bypass

System / Technologies affected

  • SQL Server
  • Windows
  • Extended Security Updates (ESU)
  • Azure
  • Microsoft Dynamics
  • Browser
  • Exchange Server
  • Microsoft Office
  • Developer Tools
  • Apps
  • System Center
  • Device

Solutions

Before installation of the software, please visit the vendor web-site for more details.

  •  Apply fixes issued by the vendor.

Vulnerability Identifier


Source


Related Link

沒有留言:

發佈留言

GitLab 多個漏洞

GitLab 多個漏洞 發佈日期: 2025年08月15日 風險: 中度風險 類型: 伺服器 - 其他伺服器 於 GitLab 發現多個漏洞。遠...