Patch days / March 2023

Microsoft Patch Tuesday — March 2023

Tuesday, 14 March 2023

Vulnerabilities: 74
Critical: 4
High: 44
Zero-days: 2
Public exploit: 7

Exploited 2

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

Critical 9.8
CVE-2023-23397 Zero-day Public exploit Microsoft Outlook Elevation of Privilege Vulnerability
EPSS 97%
Medium 4.4
CVE-2023-24880 Zero-day Windows SmartScreen Security Feature Bypass Vulnerability
EPSS 78%

Critical 3

Critical 9.8
CVE-2023-21708 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 1.5%
Critical 9.8
CVE-2023-23392 HTTP Protocol Stack Remote Code Execution Vulnerability
EPSS 1.7%
Critical 9.8
CVE-2023-23415 Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
EPSS 3.5%

Public exploit code 6

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2023-23388 Public exploit Windows Bluetooth Driver Elevation of Privilege Vulnerability
EPSS 1.6%
High 8.8
CVE-2023-24871 Public exploit Windows Bluetooth Service Remote Code Execution Vulnerability
EPSS 3.2%
High 8.2
CVE-2023-24892 Public exploit Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
EPSS 3.5%
High 7.8
CVE-2023-23399 Public exploit Microsoft Excel Remote Code Execution Vulnerability
EPSS 2.5%
Medium 6.5
CVE-2023-23396 Public exploit Microsoft Excel Denial of Service Vulnerability
EPSS 3.8%
Medium 4.5
CVE-2023-23408 Public exploit Azure Apache Ambari Spoofing Vulnerability
EPSS 4%

All vulnerabilities 74

Critical4 Show

Critical 9.8
CVE-2023-23397 Zero-day Public exploit Microsoft Outlook Elevation of Privilege Vulnerability
EPSS 97%
Critical 9.8
CVE-2023-21708 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 1.5%
Critical 9.8
CVE-2023-23392 HTTP Protocol Stack Remote Code Execution Vulnerability
EPSS 1.7%
Critical 9.8
CVE-2023-23415 Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
EPSS 3.5%

High44 Show

High 8.8
CVE-2023-23388 Public exploit Windows Bluetooth Driver Elevation of Privilege Vulnerability
EPSS 1.6%
High 8.8
CVE-2023-24871 Public exploit Windows Bluetooth Service Remote Code Execution Vulnerability
EPSS 3.2%
High 8.8
CVE-2023-23403 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2023-23406 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2023-23413 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2023-24864 Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability
EPSS 1.3%
High 8.8
CVE-2023-24867 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2023-24868 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2023-24872 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2023-24876 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.4%
High 8.8
CVE-2023-24907 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2023-24909 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.3%
High 8.8
CVE-2023-24913 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.3%
High 8.2
CVE-2023-24892 Public exploit Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
EPSS 3.5%
High 8.2
CVE-2023-23383 Service Fabric Explorer Spoofing Vulnerability
EPSS 12%
High 8.1
CVE-2023-23404 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
High 8.1
CVE-2023-23405 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 1%
High 8.1
CVE-2023-24869 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 1%
High 8.1
CVE-2023-24908 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 1%
High 7.8
CVE-2023-23399 Public exploit Microsoft Excel Remote Code Execution Vulnerability
EPSS 2.5%
High 7.8
CVE-2023-23401 Windows Media Remote Code Execution Vulnerability
High 7.8
CVE-2023-23402 Windows Media Remote Code Execution Vulnerability
High 7.8
CVE-2023-23410 Windows HTTP.sys Elevation of Privilege Vulnerability
EPSS 8%
High 7.8
CVE-2023-23412 Windows Accounts Picture Elevation of Privilege Vulnerability
High 7.8
CVE-2023-23416 Windows Cryptographic Services Remote Code Execution Vulnerability
EPSS 7.6%
High 7.8
CVE-2023-23417 Windows Partition Management Driver Elevation of Privilege Vulnerability
High 7.8
CVE-2023-23418 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
High 7.8
CVE-2023-23419 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
High 7.8
CVE-2023-23420 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2023-23421 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2023-23422 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2023-23423 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2023-24910 Windows Graphics Component Elevation of Privilege Vulnerability
High 7.8
CVE-2023-24930 Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability
High 7.5
CVE-2023-24856 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
EPSS 1.5%
High 7.5
CVE-2023-24858 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
EPSS 1.4%
High 7.5
CVE-2023-24859 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
EPSS 1.7%
High 7.2
CVE-2023-23400 Windows DNS Server Remote Code Execution Vulnerability
EPSS 1.3%
High 7.1
CVE-2023-23398 Microsoft Excel Spoofing Vulnerability
High 7.1
CVE-2023-23407 Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
High 7.1
CVE-2023-23414 Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
High 7.0
CVE-2023-23385 Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
High 7.0
CVE-2023-23393 Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability
High 7.0
CVE-2023-24861 Windows Graphics Component Elevation of Privilege Vulnerability

Medium25 Show

Medium 4.4
CVE-2023-24880 Zero-day Windows SmartScreen Security Feature Bypass Vulnerability
EPSS 78%
Medium 6.5
CVE-2023-23396 Public exploit Microsoft Excel Denial of Service Vulnerability
EPSS 3.8%
Medium 6.5
CVE-2023-23411 Windows Hyper-V Denial of Service Vulnerability
Medium 6.5
CVE-2023-24857 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
EPSS 1.5%
Medium 6.5
CVE-2023-24863 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
EPSS 1.5%
Medium 6.5
CVE-2023-24865 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
EPSS 1.5%
Medium 6.5
CVE-2023-24866 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
EPSS 1.5%
Medium 6.5
CVE-2023-24870 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
EPSS 1.5%
Medium 6.5
CVE-2023-24890 Microsoft OneDrive for iOS Security Feature Bypass Vulnerability
EPSS 1.2%
Medium 6.5
CVE-2023-24906 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
EPSS 1.5%
Medium 6.5
CVE-2023-24922 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
EPSS 1.5%
Medium 6.3
CVE-2023-23389 Microsoft Defender Elevation of Privilege Vulnerability
Medium 5.5
CVE-2023-23391 Office for Android Spoofing Vulnerability
Medium 5.5
CVE-2023-23394 Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
Medium 5.5
CVE-2023-23409 Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
Medium 5.5
CVE-2023-24862 Windows Secure Channel Denial of Service Vulnerability
Medium 5.5
CVE-2023-24882 Microsoft OneDrive for Android Information Disclosure Vulnerability
Medium 5.5
CVE-2023-24923 Microsoft OneDrive for Android Information Disclosure Vulnerability
Medium 5.4
CVE-2023-24879 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Medium 5.4
CVE-2023-24891 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Medium 5.4
CVE-2023-24919 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Medium 5.4
CVE-2023-24920 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Medium 5.4
CVE-2023-24921 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Medium 4.5
CVE-2023-23408 Public exploit Azure Apache Ambari Spoofing Vulnerability
EPSS 4%
Medium 4.3
CVE-2023-24911 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
EPSS 1.1%

Low1 Show

Low 3.1
CVE-2023-23395 Microsoft SharePoint Server Spoofing Vulnerability

Most affected products

Windows Server 2022 52 · 3 crit.
Windows 11 version 22H2 52 · 3 crit.
Windows 11 version 21H2 50 · 3 crit.
Windows Server 2019 50 · 2 crit.
Windows Server 2019 (Server Core installation) 50 · 2 crit.
Windows 10 Version 21H2 50 · 2 crit.
Windows 10 Version 22H2 50 · 2 crit.
Windows 10 Version 1809 49 · 2 crit.
Windows Server 2016 49 · 2 crit.
Windows Server 2016 (Server Core installation) 49 · 2 crit.
Windows 10 Version 20H2 49 · 2 crit.
Windows 10 Version 1607 48 · 2 crit.

About this page

CVEs published by Microsoft as CVE numbering authority from the day before to two days after its patch day (14 Mar). Exploitation status is updated daily, so a vulnerability can turn red after the release.

All Microsoft vulnerabilities →