Patch days / April 2023

Microsoft Patch Tuesday — April 2023

Tuesday, 11 April 2023

Vulnerabilities: 98
Critical: 2
High: 65
Zero-days: 1
Public exploit: 10

Exploited 2

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

High 7.8
CVE-2023-28252 Zero-day Public exploit Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 49%
High 7.0
CVE-2023-28229 Exploited Public exploit Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
EPSS 1.7%

Critical 2

Critical 9.8
CVE-2023-21554 Public exploit Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
EPSS 95%
Critical 9.8
CVE-2023-28250 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
EPSS 2%

Public exploit code 7

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

High 8.8
CVE-2023-28231 Public exploit DHCP Server Service Remote Code Execution Vulnerability
EPSS 37%
High 8.1
CVE-2023-28288 Public exploit Microsoft SharePoint Server Spoofing Vulnerability
EPSS 6.2%
High 8.1
CVE-2023-28244 Public exploit Windows Kerberos Elevation of Privilege Vulnerability
EPSS 2.9%
High 7.8
CVE-2023-28285 Public exploit Microsoft Office Remote Code Execution Vulnerability
EPSS 3%
High 7.8
CVE-2023-28293 Public exploit Windows Kernel Elevation of Privilege Vulnerability
EPSS 2.9%
High 7.8
CVE-2023-28311 Public exploit Microsoft Word Remote Code Execution Vulnerability
EPSS 2.7%
High 7.0
CVE-2023-28218 Public exploit Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
EPSS 12%

All vulnerabilities 98

Critical2 Show

Critical 9.8
CVE-2023-21554 Public exploit Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
EPSS 95%
Critical 9.8
CVE-2023-28250 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
EPSS 2%

High65 Show

High 7.8
CVE-2023-28252 Zero-day Public exploit Windows Common Log File System Driver Elevation of Privilege Vulnerability
EPSS 49%
High 7.0
CVE-2023-28229 Exploited Public exploit Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
EPSS 1.7%
High 8.8
CVE-2023-28231 Public exploit DHCP Server Service Remote Code Execution Vulnerability
EPSS 37%
High 8.8
CVE-2023-21727 Remote Procedure Call Runtime Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2023-24884 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2023-24885 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2023-24886 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2023-24887 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2023-24924 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2023-24925 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2023-24926 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2023-24927 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2023-24928 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2023-24929 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2023-28240 Windows Network Load Balancing Remote Code Execution Vulnerability
High 8.8
CVE-2023-28243 Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
EPSS 1.6%
High 8.8
CVE-2023-28275 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
EPSS 1.5%
High 8.8
CVE-2023-28297 Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability
EPSS 1.7%
High 8.4
CVE-2023-28291 Raw Image Extension Remote Code Execution Vulnerability
High 8.1
CVE-2023-28288 Public exploit Microsoft SharePoint Server Spoofing Vulnerability
EPSS 6.2%
High 8.1
CVE-2023-28244 Public exploit Windows Kerberos Elevation of Privilege Vulnerability
EPSS 2.9%
High 8.1
CVE-2023-28219 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
EPSS 15%
High 8.1
CVE-2023-28220 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
EPSS 15%
High 8.1
CVE-2023-28268 Netlogon RPC Elevation of Privilege Vulnerability
EPSS 1.5%
High 7.8
CVE-2023-28285 Public exploit Microsoft Office Remote Code Execution Vulnerability
EPSS 3%
High 7.8
CVE-2023-28293 Public exploit Windows Kernel Elevation of Privilege Vulnerability
EPSS 2.9%
High 7.8
CVE-2023-28311 Public exploit Microsoft Word Remote Code Execution Vulnerability
EPSS 2.7%
High 7.8
CVE-2023-23375 Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
High 7.8
CVE-2023-24893 Visual Studio Code Remote Code Execution Vulnerability
EPSS 1.1%
High 7.8
CVE-2023-24912 Windows Graphics Component Elevation of Privilege Vulnerability
EPSS 3.6%
High 7.8
CVE-2023-28225 Windows NTLM Elevation of Privilege Vulnerability
High 7.8
CVE-2023-28236 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2023-28237 Windows Kernel Remote Code Execution Vulnerability
High 7.8
CVE-2023-28246 Windows Registry Elevation of Privilege Vulnerability
High 7.8
CVE-2023-28248 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2023-28260 .NET DLL Hijacking Remote Code Execution Vulnerability
EPSS 1.5%
High 7.8
CVE-2023-28262 Visual Studio Elevation of Privilege Vulnerability
High 7.8
CVE-2023-28272 Windows Kernel Elevation of Privilege Vulnerability
High 7.8
CVE-2023-28274 Windows Win32k Elevation of Privilege Vulnerability
EPSS 6.8%
High 7.8
CVE-2023-28292 Raw Image Extension Remote Code Execution Vulnerability
High 7.8
CVE-2023-28296 Visual Studio Remote Code Execution Vulnerability
High 7.8
CVE-2023-28304 Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
High 7.6
CVE-2023-28309 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
High 7.5
CVE-2023-21769 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 89%
High 7.5
CVE-2023-24860 Microsoft Defender Denial of Service Vulnerability
EPSS 3.1%
High 7.5
CVE-2023-24931 Windows Secure Channel Denial of Service Vulnerability
EPSS 2%
High 7.5
CVE-2023-28217 Windows Network Address Translation (NAT) Denial of Service Vulnerability
EPSS 1.9%
High 7.5
CVE-2023-28227 Windows Bluetooth Driver Remote Code Execution Vulnerability
EPSS 6.6%
High 7.5
CVE-2023-28232 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
High 7.5
CVE-2023-28233 Windows Secure Channel Denial of Service Vulnerability
EPSS 1.7%
High 7.5
CVE-2023-28234 Windows Secure Channel Denial of Service Vulnerability
EPSS 1.7%
High 7.5
CVE-2023-28238 Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
High 7.5
CVE-2023-28241 Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
EPSS 2%
High 7.5
CVE-2023-28247 Windows Network File System Information Disclosure Vulnerability
EPSS 1.6%
High 7.5
CVE-2023-28300 Azure Service Connector Security Feature Bypass Vulnerability
High 7.5
CVE-2023-28302 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
EPSS 93%
High 7.3
CVE-2023-23384 Microsoft SQL Server Remote Code Execution Vulnerability
High 7.2
CVE-2023-28254 Windows DNS Server Remote Code Execution Vulnerability
EPSS 1.4%
High 7.1
CVE-2023-28222 Windows Kernel Elevation of Privilege Vulnerability
High 7.1
CVE-2023-28224 Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
High 7.0
CVE-2023-28218 Public exploit Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
EPSS 12%
High 7.0
CVE-2023-24914 Win32k Elevation of Privilege Vulnerability
High 7.0
CVE-2023-28216 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
High 7.0
CVE-2023-28221 Windows Error Reporting Service Elevation of Privilege Vulnerability
High 7.0
CVE-2023-28273 Windows Clip Service Elevation of Privilege Vulnerability

Medium30 Show

Medium 6.8
CVE-2023-28235 Windows Lock Screen Security Feature Bypass Vulnerability
Medium 6.8
CVE-2023-28270 Windows Lock Screen Security Feature Bypass Vulnerability
Medium 6.6
CVE-2023-28223 Windows Domain Name Service Remote Code Execution Vulnerability
EPSS 1.1%
Medium 6.6
CVE-2023-28255 Windows DNS Server Remote Code Execution Vulnerability
Medium 6.6
CVE-2023-28256 Windows DNS Server Remote Code Execution Vulnerability
Medium 6.6
CVE-2023-28278 Windows DNS Server Remote Code Execution Vulnerability
Medium 6.6
CVE-2023-28305 Windows DNS Server Remote Code Execution Vulnerability
Medium 6.6
CVE-2023-28306 Windows DNS Server Remote Code Execution Vulnerability
Medium 6.6
CVE-2023-28307 Windows DNS Server Remote Code Execution Vulnerability
Medium 6.6
CVE-2023-28308 Windows DNS Server Remote Code Execution Vulnerability
Medium 6.5
CVE-2023-24883 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
EPSS 1.5%
Medium 6.5
CVE-2023-28267 Remote Desktop Protocol Client Information Disclosure Vulnerability
EPSS 2.1%
Medium 6.5
CVE-2023-28312 Azure Machine Learning Information Disclosure Vulnerability
EPSS 1.5%
Medium 6.2
CVE-2023-28249 Windows Boot Manager Security Feature Bypass Vulnerability
Medium 6.2
CVE-2023-28269 Windows Boot Manager Security Feature Bypass Vulnerability
Medium 6.1
CVE-2023-24935 Microsoft Edge (Chromium-based) Spoofing Vulnerability
Medium 6.1
CVE-2023-28313 Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability
Medium 6.1
CVE-2023-28314 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
Medium 5.5
CVE-2023-28228 Windows Spoofing Vulnerability
Medium 5.5
CVE-2023-28253 Windows Kernel Information Disclosure Vulnerability
Medium 5.5
CVE-2023-28263 Visual Studio Information Disclosure Vulnerability
Medium 5.5
CVE-2023-28266 Windows Common Log File System Driver Information Disclosure Vulnerability
EPSS 4.4%
Medium 5.5
CVE-2023-28271 Windows Kernel Memory Information Disclosure Vulnerability
EPSS 1.2%
Medium 5.5
CVE-2023-28298 Windows Kernel Denial of Service Vulnerability
Medium 5.5
CVE-2023-28299 Visual Studio Spoofing Vulnerability
Medium 5.3
CVE-2023-28226 Windows Enroll Engine Security Feature Bypass Vulnerability
Medium 4.9
CVE-2023-28277 Windows DNS Server Information Disclosure Vulnerability
EPSS 1.4%
Medium 4.4
CVE-2023-28276 Windows Group Policy Security Feature Bypass Vulnerability
Medium 4.3
CVE-2023-21729 Remote Procedure Call Runtime Information Disclosure Vulnerability
EPSS 1.3%
Medium 4.3
CVE-2023-28284 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Low1 Show

Low 3.7
CVE-2023-28301 Microsoft Edge (Chromium-based) Tampering Vulnerability

Most affected products

Windows Server 2022 72 · 2 crit.
Windows Server 2019 69 · 2 crit.
Windows Server 2019 (Server Core installation) 69 · 2 crit.
Windows Server 2016 66 · 2 crit.
Windows Server 2016 (Server Core installation) 66 · 2 crit.
Windows Server 2012 R2 62 · 2 crit.
Windows Server 2012 R2 (Server Core installation) 62 · 2 crit.
Windows Server 2012 62 · 2 crit.
Windows Server 2012 (Server Core installation) 62 · 2 crit.
Windows 11 version 22H2 59 · 2 crit.
Windows 11 version 21H2 58 · 2 crit.
Windows 10 Version 1809 56 · 2 crit.

About this page

CVEs published by Microsoft as CVE numbering authority from the day before to two days after its patch day (11 Apr). Exploitation status is updated daily, so a vulnerability can turn red after the release.

All Microsoft vulnerabilities →