Microsoft update

KB5023705

Security Update

View on Microsoft →

Fixed in

Windows Server 2022 10.0.20348.1607
Windows Server 2022 (Server Core installation) 10.0.20348.1607

Fixes 52 records

TI-2023-10374 CVE-2023-24880 · GHSA-w3h4-66f2-wvx7

Windows SmartScreen Security Feature Bypass Vulnerability

HIGH 78KEV

Windows SmartScreen Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.4 Local No auth User interaction EPSS 0.78152 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +6 CWE-863

TI-2023-09235 CVE-2023-23392 · GHSA-w2mc-hp99-v44h

HTTP Protocol Stack Remote Code Execution Vulnerability

MEDIUM 52

HTTP Protocol Stack Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01672 Published 2023-03-14 Fixed in 10.0.20348.1607, 10.0.22000.1696 +1 CWE-416

TI-2023-08093 CVE-2023-21708 · GHSA-p7hh-q888-5m4g

Remote Procedure Call Runtime Remote Code Execution Vulnerability

MEDIUM 52

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01486 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +11 CWE-191

TI-2023-09258 CVE-2023-23415 · GHSA-hqhq-3xw9-5892

Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability

MEDIUM 49

Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03479 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +11 CWE-122

TI-2023-09253 CVE-2023-23410 · GHSA-r3h3-g5xw-7jcr

Windows HTTP.sys Elevation of Privilege Vulnerability

MEDIUM 47

Windows HTTP.sys Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0795 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +11 CWE-190

TI-2023-09259 CVE-2023-23416 · GHSA-fqrg-vgqq-fff3

Windows Cryptographic Services Remote Code Execution Vulnerability

MEDIUM 46

Windows Cryptographic Services Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.07581 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-20

TI-2023-10370 CVE-2023-24871 · GHSA-2wcr-hmvp-6j36

Windows Bluetooth Service Remote Code Execution Vulnerability

MEDIUM 44

Windows Bluetooth Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.03217 Published 2023-03-14 Fixed in 10.0.20348.1607, 10.0.19042.2728 +4 CWE-190

TI-2023-10404 CVE-2023-24913 · GHSA-6m28-vh93-7x2v

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01289 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-122

TI-2023-10400 CVE-2023-24909 · GHSA-cvmq-mwrr-2cjw

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01289 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-190

TI-2023-10398 CVE-2023-24907 · GHSA-4mwf-f5r2-4r4g

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01289 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-122

TI-2023-10372 CVE-2023-24876 · GHSA-4pgc-mf63-3x2r

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01401 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-122

TI-2023-10371 CVE-2023-24872 · GHSA-g43m-56w9-qc5h

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01289 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-125

TI-2023-10367 CVE-2023-24868 · GHSA-qx87-7jx7-x8h3

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01289 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-122

TI-2023-10366 CVE-2023-24867 · GHSA-hj73-g9c7-cp63

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01289 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-122

TI-2023-09256 CVE-2023-23413 · GHSA-3w36-ppm5-2f9j

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01289 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-908

TI-2023-09249 CVE-2023-23406 · GHSA-jxf4-6cx2-xj8c

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01289 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-122

TI-2023-09246 CVE-2023-23403 · GHSA-6882-cffw-fg5p

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01289 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-122

TI-2023-10358 CVE-2023-24859 · GHSA-952x-v9p9-3683

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

MEDIUM 42

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01654 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-476

TI-2023-10357 CVE-2023-24858 · GHSA-5gfr-xpwh-vmf9

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

MEDIUM 42

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01425 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-126

TI-2023-10355 CVE-2023-24856 · GHSA-8q88-m5xj-m29g

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

MEDIUM 42

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01495 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-20

TI-2023-10363 CVE-2023-24864 · GHSA-v8gq-2fh7-6j3q

Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability

MEDIUM 41

Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01289 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-191

TI-2023-09231 CVE-2023-23388 · GHSA-xgp6-75vr-8v4c

Windows Bluetooth Driver Elevation of Privilege Vulnerability

MEDIUM 41

Windows Bluetooth Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.01568 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +6 CWE-681

TI-2023-10399 CVE-2023-24908 · GHSA-v4rf-q2q2-8g8x

Remote Procedure Call Runtime Remote Code Execution Vulnerability

LOW 39

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01002 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +11 CWE-190

TI-2023-09248 CVE-2023-23405 · GHSA-w4v2-45q6-wrv6

Remote Procedure Call Runtime Remote Code Execution Vulnerability

LOW 39

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01002 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +11 CWE-190

TI-2023-09247 CVE-2023-23404 · GHSA-7vfq-wvr3-47vm

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

LOW 39

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00834 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-416

TI-2023-10368 CVE-2023-24869 · GHSA-xj84-whq8-hph6

Remote Procedure Call Runtime Remote Code Execution Vulnerability

LOW 37

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01002 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +11 CWE-190

TI-2023-09266 CVE-2023-23423 · GHSA-369q-m6cp-9fh8

Windows Kernel Elevation of Privilege Vulnerability

LOW 37

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00596 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +11

TI-2023-09265 CVE-2023-23422 · GHSA-cm2w-7x7w-q2m6

Windows Kernel Elevation of Privilege Vulnerability

LOW 37

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00596 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +11

TI-2023-09264 CVE-2023-23421 · GHSA-6534-5p4f-cmcm

Windows Kernel Elevation of Privilege Vulnerability

LOW 37

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00674 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +11 CWE-416

TI-2023-09263 CVE-2023-23420 · GHSA-v88r-4mgh-ph8r

Windows Kernel Elevation of Privilege Vulnerability

LOW 37

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00749 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +11 CWE-416

TI-2023-09245 CVE-2023-23402 · GHSA-vqj3-6hvj-hgpw

Windows Media Remote Code Execution Vulnerability

LOW 37

Windows Media Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00598 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +10 CWE-415

TI-2023-09244 CVE-2023-23401 · GHSA-p454-48cm-4866

Windows Media Remote Code Execution Vulnerability

LOW 37

Windows Media Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00598 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +10 CWE-681

TI-2023-10401 CVE-2023-24910 · GHSA-pvgx-cgc8-6g74

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 36

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00393 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +14 CWE-476

TI-2023-09260 CVE-2023-23417 · GHSA-gmq2-6hqw-wqw4

Windows Partition Management Driver Elevation of Privilege Vulnerability

LOW 36

Windows Partition Management Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00393 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +6 CWE-190

TI-2023-09255 CVE-2023-23412 · GHSA-jh78-94vq-38q3

Windows Accounts Picture Elevation of Privilege Vulnerability

LOW 36

Windows Accounts Picture Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00343 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +7 CWE-269

TI-2023-09243 CVE-2023-23400 · GHSA-fh3r-82wq-4j58

Windows DNS Server Remote Code Execution Vulnerability

LOW 36

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01256 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +2 CWE-122

TI-2023-10360 CVE-2023-24861 · GHSA-j6x4-c8gh-g296

Windows Graphics Component Elevation of Privilege Vulnerability

LOW 33

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00273 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +11 CWE-367

TI-2023-09257 CVE-2023-23414 · GHSA-rj6c-3wgj-2r9h

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

LOW 33

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.1 Adjacent network No auth User interaction EPSS 0.00394 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +10 CWE-591

TI-2023-09250 CVE-2023-23407 · GHSA-89r6-vqv7-m7cq

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

LOW 33

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.1 Adjacent network No auth User interaction EPSS 0.00394 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +10 CWE-591

TI-2023-09230 CVE-2023-23385 · GHSA-r47j-5cwp-959p

Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability

LOW 33

Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00327 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +11 CWE-190

TI-2023-10397 CVE-2023-24906 · GHSA-hvgw-r2wx-xwh4

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

LOW 32

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01461 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-190

TI-2023-10369 CVE-2023-24870 · GHSA-m6m9-jxq4-5486

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

LOW 32

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01461 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-126

TI-2023-10365 CVE-2023-24866 · GHSA-85mv-6cv3-242p

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

LOW 32

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01532 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-20

TI-2023-10364 CVE-2023-24865 · GHSA-7vhc-87f8-mv8h

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

LOW 32

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01532 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-20

TI-2023-10362 CVE-2023-24863 · GHSA-pmpf-mg57-995x

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

LOW 32

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01461 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-190

TI-2023-10356 CVE-2023-24857 · GHSA-9cjc-32cv-9g3c

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

LOW 32

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01461 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-126

TI-2023-09236 CVE-2023-23393 · GHSA-v9gj-jv4f-pmr6

Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability

LOW 32

Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00246 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +5 CWE-591

TI-2023-09254 CVE-2023-23411 · GHSA-m3jf-f6c8-9p29

Windows Hyper-V Denial of Service Vulnerability

LOW 30

Windows Hyper-V Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.0058 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +6 CWE-400

TI-2023-10361 CVE-2023-24862 · GHSA-v2q8-rhc7-3crp

Windows Secure Channel Denial of Service Vulnerability

LOW 25

Windows Secure Channel Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00497 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +11 CWE-125

TI-2023-09252 CVE-2023-23409 · GHSA-wmmg-rjjc-vqh8

Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

LOW 25

Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00465 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +11 CWE-20

TI-2023-09237 CVE-2023-23394 · GHSA-835g-mmpx-fpqj

Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

LOW 25

Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00465 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +11 CWE-822

TI-2023-10402 CVE-2023-24911 · GHSA-45cr-2j6q-p87c

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

LOW 22

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01131 Published 2023-03-14 Fixed in 10.0.17763.4131, 10.0.20348.1607 +9 CWE-191