Microsoft update

KB5022872

Monthly Rollup

View on Microsoft →

Fixed in

Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.26366
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.26366

Fixes 33 records

TI-2023-09222 CVE-2023-23376 · GHSA-j6mx-66rf-6rxq

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.10853 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-122

TI-2023-08201 CVE-2023-21823 · GHSA-7ggm-m49m-ff38

Windows Graphics Component Remote Code Execution Vulnerability

CRITICAL 93KEV

Windows Graphics Component Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.05563 Published 2023-02-14 Fixed in 16.0.16130.20156, 2.70.23021003 +14 CWE-190

TI-2023-08196 CVE-2023-21817 · GHSA-4w7x-2jcw-qr33

Windows Kerberos Elevation of Privilege Vulnerability

HIGH 69

Windows Kerberos Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00784 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-287

TI-2023-08197 CVE-2023-21818 · GHSA-vjrg-8w99-353r

Windows Secure Channel Denial of Service Vulnerability

HIGH 68

Windows Secure Channel Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.43172 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +10 CWE-20

TI-2023-08076 CVE-2023-21689 · GHSA-76p3-c44w-mmmj

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

HIGH 65

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.26702 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +10 CWE-122

TI-2023-08077 CVE-2023-21690 · GHSA-wr34-5f4g-8569

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

MEDIUM 64

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.27737 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +10 CWE-122

TI-2023-08079 CVE-2023-21692 · GHSA-c658-g89f-xvmh

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

MEDIUM 61

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.21403 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-122

TI-2023-08071 CVE-2023-21684 · GHSA-h4wh-f8w7-hph3

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.013 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-191

TI-2023-08193 CVE-2023-21813 · GHSA-49wc-943v-whmw

Windows Secure Channel Denial of Service Vulnerability

MEDIUM 42

Windows Secure Channel Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01654 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-126

TI-2023-08192 CVE-2023-21812 · GHSA-x69r-8chh-vqhm

Windows Common Log File System Driver Elevation of Privilege Vulnerability

MEDIUM 42

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03296 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-122

TI-2023-08191 CVE-2023-21811 · GHSA-92r2-pf82-g6gp

Windows iSCSI Service Denial of Service Vulnerability

MEDIUM 42

Windows iSCSI Service Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01654 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-126

TI-2023-08179 CVE-2023-21798 · GHSA-xv3v-mrcp-v5qc

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 42

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01188 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-125

TI-2023-08178 CVE-2023-21797 · GHSA-5f6p-24pm-h2jp

Microsoft ODBC Driver Remote Code Execution Vulnerability

MEDIUM 42

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01188 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-190

TI-2023-08087 CVE-2023-21702 · GHSA-6cmm-7g2g-4f52

Windows iSCSI Service Denial of Service Vulnerability

MEDIUM 42

Windows iSCSI Service Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01654 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-125

TI-2023-08086 CVE-2023-21701 · GHSA-jj7c-j655-mxrx

Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability

MEDIUM 42

Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01654 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-126

TI-2023-08085 CVE-2023-21700 · GHSA-p5xv-pc99-whmw

Windows iSCSI Discovery Service Denial of Service Vulnerability

MEDIUM 42

Windows iSCSI Discovery Service Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01654 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-476

TI-2023-08075 CVE-2023-21688 · GHSA-37v9-32xg-4mwc

NT OS Kernel Elevation of Privilege Vulnerability

MEDIUM 42

NT OS Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03633 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-416

TI-2023-08072 CVE-2023-21685 · GHSA-fqw9-5rf7-p2x8

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 42

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01217 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-20

TI-2023-08180 CVE-2023-21799 · GHSA-8c5c-wpc5-p822

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 40

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01188 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-122

TI-2023-08082 CVE-2023-21695 · GHSA-869x-6wgw-grqg

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

MEDIUM 40

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01056 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-122

TI-2023-08073 CVE-2023-21686 · GHSA-9pr5-wvjg-35xp

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 40

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0116 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-190

TI-2023-08195 CVE-2023-21816 · GHSA-9w9w-3fwh-4rc6

Windows Active Directory Domain Services API Denial of Service Vulnerability

LOW 38

Windows Active Directory Domain Services API Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01735 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-20

TI-2023-08181 CVE-2023-21800 · GHSA-qqww-f8jg-rchq

Windows Installer Elevation of Privilege Vulnerability

LOW 38

Windows Installer Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01066 Published 2023-02-14 Fixed in 6.0.6003.21915, 6.1.7601.26366 CWE-73

TI-2023-08200 CVE-2023-21822 · GHSA-8fpr-mw3q-7qp8

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 37

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0077 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-416

TI-2023-08186 CVE-2023-21805 · GHSA-grqq-prph-hfgm

Windows MSHTML Platform Remote Code Execution Vulnerability

LOW 37

Windows MSHTML Platform Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00737 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-77

TI-2023-08183 CVE-2023-21802 · GHSA-jhf4-xrh4-5595

Windows Media Remote Code Execution Vulnerability

LOW 37

Windows Media Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00642 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-190

TI-2023-08182 CVE-2023-21801 · GHSA-6rgx-gvfj-g5jx

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

LOW 36

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00406 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-189

TI-2023-08078 CVE-2023-21691 · GHSA-r55q-9q39-7jq3

Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability

LOW 36

Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01437 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-125

TI-2023-08199 CVE-2023-21820 · GHSA-xgr9-7593-ff2p

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

LOW 35

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.4 Adjacent network Low privileges User interaction EPSS 0.00638 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-126

TI-2023-08081 CVE-2023-21694 · GHSA-mxr9-fqjp-9x45

Windows Fax Service Remote Code Execution Vulnerability

LOW 33

Windows Fax Service Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00562 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-122

TI-2023-08083 CVE-2023-21697 · GHSA-rrgq-3j34-jqg8

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

LOW 28

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00497 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +8 CWE-126

TI-2023-08080 CVE-2023-21693 · GHSA-24f2-7w8f-672w

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

LOW 28

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.01392 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +11 CWE-125

TI-2023-08084 CVE-2023-21699 · GHSA-3jf7-8x4g-597x

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

LOW 26

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01112 Published 2023-02-14 Fixed in 10.0.10240.19747, 10.0.14393.5717 +8 CWE-125