Microsoft Patch Tuesday — January 2023

Tuesday, 10 January 2023

Vulnerabilities: 98
Critical: 0
High: 84
Zero-days: 1
Public exploit: 10

Exploited 1

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 8.8
CVE-2023-21674 Zero-day Public exploit Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
EPSS 34%

Public exploit code 9

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2023-21742 Public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 56%
High 7.8
CVE-2023-21768 Public exploit Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
EPSS 65%
High 7.8
CVE-2023-21537 Public exploit Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21746 Public exploit Windows NTLM Elevation of Privilege Vulnerability
EPSS 2.5%
High 7.1
CVE-2023-21752 Public exploit Windows Backup Service Elevation of Privilege Vulnerability
EPSS 5.5%
High 7.0
CVE-2023-21739 Public exploit Windows Bluetooth Driver Elevation of Privilege Vulnerability
Medium 6.8
CVE-2023-21563 Public exploit BitLocker Security Feature Bypass Vulnerability
EPSS 1.5%
Medium 6.6
CVE-2023-21560 Public exploit Windows Boot Manager Security Feature Bypass Vulnerability
EPSS 1.2%
Medium 4.7
CVE-2023-21766 Public exploit Windows Overlay Filter Information Disclosure Vulnerability

All vulnerabilities 98

High84 Show

High 8.8
CVE-2023-21674 Zero-day Public exploit Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
EPSS 34%
High 8.8
CVE-2023-21742 Public exploit Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 56%
High 8.8
CVE-2023-21549 Windows SMB Witness Service Elevation of Privilege Vulnerability
EPSS 1.4%
High 8.8
CVE-2023-21676 Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2023-21681 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2023-21732 Microsoft ODBC Driver Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2023-21744 Microsoft SharePoint Server Remote Code Execution Vulnerability
EPSS 3.1%
High 8.1
CVE-2023-21535 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
EPSS 1%
High 8.1
CVE-2023-21543 Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
EPSS 1.7%
High 8.1
CVE-2023-21546 Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
EPSS 1.1%
High 8.1
CVE-2023-21548 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
EPSS 1%
High 8.1
CVE-2023-21555 Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
EPSS 1.1%
High 8.1
CVE-2023-21556 Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
EPSS 1.4%
High 8.1
CVE-2023-21679 Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
EPSS 1.1%
High 8.0
CVE-2023-21745 Microsoft Exchange Server Spoofing Vulnerability
EPSS 1.4%
High 8.0
CVE-2023-21762 Microsoft Exchange Server Spoofing Vulnerability
EPSS 1.5%
High 7.8
CVE-2023-21768 Public exploit Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
EPSS 65%
High 7.8
CVE-2023-21537 Public exploit Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21746 Public exploit Windows NTLM Elevation of Privilege Vulnerability
EPSS 2.5%
High 7.8
CVE-2023-21524 Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21541 Windows Task Scheduler Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21551 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21552 Windows GDI Elevation of Privilege Vulnerability
EPSS 3.5%
High 7.8
CVE-2023-21558 Windows Error Reporting Service Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21561 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21675 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21678 Windows Print Spooler Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21680 Windows Win32k Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21724 Microsoft DWM Core Library Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21726 Windows Credential Manager User Interface Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21730 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21734 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2023-21735 Microsoft Office Remote Code Execution Vulnerability
High 7.8
CVE-2023-21736 Microsoft Office Visio Remote Code Execution Vulnerability
High 7.8
CVE-2023-21737 Microsoft Office Visio Remote Code Execution Vulnerability
High 7.8
CVE-2023-21738 Microsoft Office Visio Remote Code Execution Vulnerability
High 7.8
CVE-2023-21747 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21748 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21749 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21754 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21755 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21763 Microsoft Exchange Server Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21764 Microsoft Exchange Server Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21765 Windows Print Spooler Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21767 Windows Overlay Filter Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21772 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21773 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21774 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2023-21779 Visual Studio Code Remote Code Execution Vulnerability
EPSS 2.2%
High 7.8
CVE-2023-21780 3D Builder Remote Code Execution Vulnerability
High 7.8
CVE-2023-21781 3D Builder Remote Code Execution Vulnerability
High 7.8
CVE-2023-21782 3D Builder Remote Code Execution Vulnerability
High 7.8
CVE-2023-21783 3D Builder Remote Code Execution Vulnerability
EPSS 1.2%
High 7.8
CVE-2023-21784 3D Builder Remote Code Execution Vulnerability
High 7.8
CVE-2023-21785 3D Builder Remote Code Execution Vulnerability
High 7.8
CVE-2023-21786 3D Builder Remote Code Execution Vulnerability
High 7.8
CVE-2023-21787 3D Builder Remote Code Execution Vulnerability
High 7.8
CVE-2023-21788 3D Builder Remote Code Execution Vulnerability
High 7.8
CVE-2023-21789 3D Builder Remote Code Execution Vulnerability
High 7.8
CVE-2023-21790 3D Builder Remote Code Execution Vulnerability
High 7.8
CVE-2023-21791 3D Builder Remote Code Execution Vulnerability
High 7.8
CVE-2023-21792 3D Builder Remote Code Execution Vulnerability
High 7.8
CVE-2023-21793 3D Builder Remote Code Execution Vulnerability
High 7.5
CVE-2023-21527 Windows iSCSI Service Denial of Service Vulnerability
EPSS 2.1%
High 7.5
CVE-2023-21538 .NET Denial of Service Vulnerability
EPSS 3%
High 7.5
CVE-2023-21539 Windows Authentication Remote Code Execution Vulnerability
EPSS 1.3%
High 7.5
CVE-2023-21547 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
EPSS 89%
High 7.5
CVE-2023-21557 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
EPSS 2.2%
High 7.5
CVE-2023-21677 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
EPSS 2.1%
High 7.5
CVE-2023-21683 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
EPSS 2.1%
High 7.5
CVE-2023-21728 Windows Netlogon Denial of Service Vulnerability
EPSS 2.1%
High 7.5
CVE-2023-21757 Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability
EPSS 2.1%
High 7.5
CVE-2023-21758 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
EPSS 93%
High 7.5
CVE-2023-21761 Microsoft Exchange Server Information Disclosure Vulnerability
EPSS 1.7%
High 7.1
CVE-2023-21752 Public exploit Windows Backup Service Elevation of Privilege Vulnerability
EPSS 5.5%
High 7.1
CVE-2023-21741 Microsoft Office Visio Information Disclosure Vulnerability
EPSS 1.9%
High 7.1
CVE-2023-21750 Windows Kernel Elevation of Privilege Vulnerability
High 7.1
CVE-2023-21760 Windows Print Spooler Elevation of Privilege Vulnerability
High 7.0
CVE-2023-21739 Public exploit Windows Bluetooth Driver Elevation of Privilege Vulnerability
High 7.0
CVE-2023-21531 Azure Service Fabric Container Elevation of Privilege Vulnerability
High 7.0
CVE-2023-21532 Windows GDI Elevation of Privilege Vulnerability
High 7.0
CVE-2023-21542 Windows Installer Elevation of Privilege Vulnerability
High 7.0
CVE-2023-21733 Windows Bind Filter Driver Elevation of Privilege Vulnerability
High 7.0
CVE-2023-21771 Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability

Medium13 Show

Medium 6.8
CVE-2023-21563 Public exploit BitLocker Security Feature Bypass Vulnerability
EPSS 1.5%
Medium 6.6
CVE-2023-21560 Public exploit Windows Boot Manager Security Feature Bypass Vulnerability
EPSS 1.2%
Medium 6.3
CVE-2023-21725 Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability
Medium 5.5
CVE-2023-21540 Windows Cryptographic Information Disclosure Vulnerability
Medium 5.5
CVE-2023-21550 Windows Cryptographic Information Disclosure Vulnerability
Medium 5.5
CVE-2023-21559 Windows Cryptographic Information Disclosure Vulnerability
Medium 5.5
CVE-2023-21753 Event Tracing for Windows Information Disclosure Vulnerability
Medium 5.5
CVE-2023-21776 Windows Kernel Information Disclosure Vulnerability
EPSS 1.1%
Medium 5.3
CVE-2023-21525 Remote Procedure Call Runtime Denial of Service Vulnerability
EPSS 1.6%
Medium 5.3
CVE-2023-21682 Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability
EPSS 1.5%
Medium 5.3
CVE-2023-21743 Microsoft SharePoint Server Security Feature Bypass Vulnerability
EPSS 1.1%
Medium 4.7
CVE-2023-21766 Public exploit Windows Overlay Filter Information Disclosure Vulnerability
Medium 4.7
CVE-2023-21536 Event Tracing for Windows Information Disclosure Vulnerability

Low1 Show

Low 3.3
CVE-2023-21759 Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability