Microsoft update

KB5025234

Security Update

View on Microsoft →

Fixed in

Windows 10 for 32-bit Systems 10.0.10240.19869
Windows 10 for x64-based Systems 10.0.10240.19869

Fixes 50 records

TI-2023-12812 CVE-2023-28252 · GHSA-385j-3gwh-pjgr

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.48892 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-122

TI-2023-07949 CVE-2023-21554 · GHSA-xvhr-xr27-hpmq

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CRITICAL 93

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.95412 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-20

TI-2023-12793 CVE-2023-28229 · GHSA-62cg-xhwr-xf37

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CRITICAL 90KEV

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.01671 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-591

TI-2023-12851 CVE-2023-28302 · GHSA-j2x9-pqv3-56mg

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

HIGH 82

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.92573 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-20

TI-2023-08151 CVE-2023-21769 · GHSA-9pvf-crwc-vr62

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

HIGH 81

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.88673 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-125

TI-2023-12810 CVE-2023-28250 · GHSA-5r29-vrv7-f875

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

MEDIUM 53

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02026 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-191

TI-2023-12784 CVE-2023-28220 · GHSA-mh7v-25c7-w887

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 53

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.14979 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-591

TI-2023-12783 CVE-2023-28219 · GHSA-gj3h-frf4-5mrw

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 53

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.14979 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-591

TI-2023-12782 CVE-2023-28218 · GHSA-8xvr-whx3-qc75

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

MEDIUM 47

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.12397 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-122

TI-2023-12830 CVE-2023-28275 · GHSA-wf5x-33cm-pc46

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01463 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-122

TI-2023-12804 CVE-2023-28243 · GHSA-jjw9-xcj7-xpr2

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01634 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +9 CWE-843

TI-2023-12803 CVE-2023-28241 · GHSA-6884-2gj5-fx64

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability

MEDIUM 43

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01986 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11

TI-2023-12781 CVE-2023-28217 · GHSA-3hx9-99w5-pvxh

Windows Network Address Translation (NAT) Denial of Service Vulnerability

MEDIUM 43

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01936 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-400

TI-2023-10418 CVE-2023-24931 · GHSA-fjj6-jgqj-2xhh

Windows Secure Channel Denial of Service Vulnerability

MEDIUM 43

Windows Secure Channel Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02026 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +10 CWE-125

TI-2023-10416 CVE-2023-24929 · GHSA-j55p-xpvx-54gf

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0164 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +9 CWE-843

TI-2023-10415 CVE-2023-24928 · GHSA-7px8-pv4v-fmx8

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0164 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +9 CWE-122

TI-2023-10414 CVE-2023-24927 · GHSA-rv9r-w648-j85w

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0164 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +9 CWE-843

TI-2023-10413 CVE-2023-24926 · GHSA-gf8x-jrh5-9rhr

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0164 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +9 CWE-122

TI-2023-10412 CVE-2023-24925 · GHSA-p5c5-wmmp-fm6v

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0164 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +9 CWE-416

TI-2023-10411 CVE-2023-24924 · GHSA-99cg-rj72-c2jf

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0164 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +9 CWE-125

TI-2023-10381 CVE-2023-24887 · GHSA-m4p8-6x5j-h9fw

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0164 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +9 CWE-191

TI-2023-10380 CVE-2023-24886 · GHSA-3q8f-782v-j9jg

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0164 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +9 CWE-908

TI-2023-10379 CVE-2023-24885 · GHSA-jghp-9gmf-h235

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0164 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +9 CWE-843

TI-2023-10378 CVE-2023-24884 · GHSA-j2cx-v4v9-54w7

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

MEDIUM 43

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0164 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +9 CWE-681

TI-2023-08110 CVE-2023-21727 · GHSA-h785-wmf4-9p56

Remote Procedure Call Runtime Remote Code Execution Vulnerability

MEDIUM 43

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0164 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-122

TI-2023-12791 CVE-2023-28227 · GHSA-4x9h-fx86-48pv

Windows Bluetooth Driver Remote Code Execution Vulnerability

MEDIUM 42

Windows Bluetooth Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.06585 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-122

TI-2023-10403 CVE-2023-24912 · GHSA-gr3q-7g86-63q2

Windows Graphics Component Elevation of Privilege Vulnerability

MEDIUM 42

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03571 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-122

TI-2023-12843 CVE-2023-28293 · GHSA-rggp-g5p7-mr37

Windows Kernel Elevation of Privilege Vulnerability

LOW 39

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02866 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-191

TI-2023-12827 CVE-2023-28272 · GHSA-x2wm-8rcj-2wxw

Windows Kernel Elevation of Privilege Vulnerability

LOW 37

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00485 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-191

TI-2023-12800 CVE-2023-28237 · GHSA-84g9-2mf7-pppv

Windows Kernel Remote Code Execution Vulnerability

LOW 37

Windows Kernel Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00586 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +9 CWE-190

TI-2023-12795 CVE-2023-28232 · GHSA-3rh8-jx6v-pf36

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

LOW 37

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00906 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-362

TI-2023-12801 CVE-2023-28238 · GHSA-qjcx-7rrr-4g4q

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

LOW 36

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00877 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +10 CWE-591

TI-2023-12799 CVE-2023-28236 · GHSA-h57g-2jj7-wmp5

Windows Kernel Elevation of Privilege Vulnerability

LOW 36

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0029 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +9 CWE-591

TI-2023-12789 CVE-2023-28225 · GHSA-28gq-f57x-x6j7

Windows NTLM Elevation of Privilege Vulnerability

LOW 36

Windows NTLM Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00448 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +7 CWE-122

TI-2023-12824 CVE-2023-28269 · GHSA-q443-m8g7-25q9

Windows Boot Manager Security Feature Bypass Vulnerability

LOW 33

Windows Boot Manager Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00626 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +9 CWE-122

TI-2023-12822 CVE-2023-28267 · GHSA-mqgq-m2wx-8xxh

Remote Desktop Protocol Client Information Disclosure Vulnerability

LOW 33

Remote Desktop Protocol Client Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02086 Published 2023-04-11 Fixed in 10.0.17763.4252, 1.2.4157.0 +11 CWE-126

TI-2023-12809 CVE-2023-28249 · GHSA-x49h-89m5-c8jw

Windows Boot Manager Security Feature Bypass Vulnerability

LOW 33

Windows Boot Manager Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00579 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +9 CWE-863

TI-2023-12788 CVE-2023-28224 · GHSA-wqjf-hjqw-m7qw

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

LOW 33

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.1 Adjacent network No auth User interaction EPSS 0.00394 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +9 CWE-591

TI-2023-12785 CVE-2023-28221 · GHSA-2697-j9w4-39rc

Windows Error Reporting Service Elevation of Privilege Vulnerability

LOW 33

Windows Error Reporting Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00489 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +7 CWE-200

TI-2023-12780 CVE-2023-28216 · GHSA-xqj5-4q2p-7gm5

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

LOW 33

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00372 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11

TI-2023-12821 CVE-2023-28266 · GHSA-7mmq-442r-m49h

Windows Common Log File System Driver Information Disclosure Vulnerability

LOW 32

Windows Common Log File System Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.04361 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-126

TI-2023-12786 CVE-2023-28222 · GHSA-m7rq-qh6x-9m8q

Windows Kernel Elevation of Privilege Vulnerability

LOW 32

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00683 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-59

TI-2023-10377 CVE-2023-24883 · GHSA-qr8c-8fwf-jw4x

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

LOW 32

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01461 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +9 CWE-126

TI-2023-12826 CVE-2023-28271 · GHSA-86hj-4q76-h6c7

Windows Kernel Memory Information Disclosure Vulnerability

LOW 27

Windows Kernel Memory Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01164 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-200

TI-2023-08112 CVE-2023-21729 · GHSA-q6p2-wmcr-m7v3

Remote Procedure Call Runtime Information Disclosure Vulnerability

LOW 27

Remote Procedure Call Runtime Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01348 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-125

TI-2023-12847 CVE-2023-28298 · GHSA-fh73-7w3w-55q3

Windows Kernel Denial of Service Vulnerability

LOW 26

Windows Kernel Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00566 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11

TI-2023-12813 CVE-2023-28253 · GHSA-j96j-pqmj-vx5q

Windows Kernel Information Disclosure Vulnerability

LOW 26

Windows Kernel Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00555 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11

TI-2023-12792 CVE-2023-28228 · GHSA-vm5p-f42w-775j

Windows Spoofing Vulnerability

LOW 25

Windows Spoofing Vulnerability

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00453 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-347

TI-2023-12790 CVE-2023-28226 · GHSA-2q2q-mrmp-9grr

Windows Enroll Engine Security Feature Bypass Vulnerability

LOW 25

Windows Enroll Engine Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00671 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.19042.2846 +6 CWE-347

TI-2023-12831 CVE-2023-28276 · GHSA-q2jg-4rq6-p528

Windows Group Policy Security Feature Bypass Vulnerability

LOW 21

Windows Group Policy Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00461 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11