Microsoft update

KB5025277

Security Only

View on Microsoft →

Fixed in

Windows Server 2008 R2 for x64-based Systems Service Pack 1 6.1.7601.26466
Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 6.1.7601.26466

Fixes 43 records

TI-2023-12812 CVE-2023-28252 · GHSA-385j-3gwh-pjgr

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CRITICAL 93KEV

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.48892 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-122

TI-2023-07949 CVE-2023-21554 · GHSA-xvhr-xr27-hpmq

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CRITICAL 93

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.95412 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-20

TI-2023-12793 CVE-2023-28229 · GHSA-62cg-xhwr-xf37

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CRITICAL 90KEV

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.01671 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-591

TI-2023-12851 CVE-2023-28302 · GHSA-j2x9-pqv3-56mg

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

HIGH 82

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.92573 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-20

TI-2023-08151 CVE-2023-21769 · GHSA-9pvf-crwc-vr62

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

HIGH 81

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.88673 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-125

TI-2023-12794 CVE-2023-28231 · GHSA-g8vr-9m8f-7hmc

DHCP Server Service Remote Code Execution Vulnerability

HIGH 66

DHCP Server Service Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.36623 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +5 CWE-122

TI-2023-12810 CVE-2023-28250 · GHSA-5r29-vrv7-f875

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

MEDIUM 53

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02026 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-191

TI-2023-12784 CVE-2023-28220 · GHSA-mh7v-25c7-w887

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 53

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.14979 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-591

TI-2023-12783 CVE-2023-28219 · GHSA-gj3h-frf4-5mrw

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

MEDIUM 53

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.14979 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-591

TI-2023-12782 CVE-2023-28218 · GHSA-8xvr-whx3-qc75

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

MEDIUM 47

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.12397 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-122

TI-2023-12830 CVE-2023-28275 · GHSA-wf5x-33cm-pc46

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

MEDIUM 43

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01463 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-122

TI-2023-12805 CVE-2023-28244 · GHSA-3xmh-pj8g-v9w9

Windows Kerberos Elevation of Privilege Vulnerability

MEDIUM 43

Windows Kerberos Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0292 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +5 CWE-327

TI-2023-12803 CVE-2023-28241 · GHSA-6884-2gj5-fx64

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability

MEDIUM 43

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01986 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11

TI-2023-12781 CVE-2023-28217 · GHSA-3hx9-99w5-pvxh

Windows Network Address Translation (NAT) Denial of Service Vulnerability

MEDIUM 43

Windows Network Address Translation (NAT) Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01936 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-400

TI-2023-10418 CVE-2023-24931 · GHSA-fjj6-jgqj-2xhh

Windows Secure Channel Denial of Service Vulnerability

MEDIUM 43

Windows Secure Channel Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02026 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +10 CWE-125

TI-2023-08110 CVE-2023-21727 · GHSA-h785-wmf4-9p56

Remote Procedure Call Runtime Remote Code Execution Vulnerability

MEDIUM 43

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0164 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-122

TI-2023-12791 CVE-2023-28227 · GHSA-4x9h-fx86-48pv

Windows Bluetooth Driver Remote Code Execution Vulnerability

MEDIUM 42

Windows Bluetooth Driver Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.06585 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-122

TI-2023-10403 CVE-2023-24912 · GHSA-gr3q-7g86-63q2

Windows Graphics Component Elevation of Privilege Vulnerability

MEDIUM 42

Windows Graphics Component Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03571 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-122

TI-2023-12802 CVE-2023-28240 · GHSA-fg86-xg34-2fr5

Windows Network Load Balancing Remote Code Execution Vulnerability

MEDIUM 41

Windows Network Load Balancing Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00754 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +5 CWE-122

TI-2023-12823 CVE-2023-28268 · GHSA-2px6-5qxv-8594

Netlogon RPC Elevation of Privilege Vulnerability

MEDIUM 40

Netlogon RPC Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01486 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +5

TI-2023-12843 CVE-2023-28293 · GHSA-rggp-g5p7-mr37

Windows Kernel Elevation of Privilege Vulnerability

LOW 39

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.02866 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-191

TI-2023-12827 CVE-2023-28272 · GHSA-x2wm-8rcj-2wxw

Windows Kernel Elevation of Privilege Vulnerability

LOW 37

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00485 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-191

TI-2023-12814 CVE-2023-28254 · GHSA-jmpj-ch6c-j8vm

Windows DNS Server Remote Code Execution Vulnerability

LOW 37

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01441 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +5 CWE-122

TI-2023-12795 CVE-2023-28232 · GHSA-3rh8-jx6v-pf36

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

LOW 37

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00906 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-362

TI-2023-12801 CVE-2023-28238 · GHSA-qjcx-7rrr-4g4q

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

LOW 36

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00877 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +10 CWE-591

TI-2023-12787 CVE-2023-28223 · GHSA-jh64-r45j-g2mv

Windows Domain Name Service Remote Code Execution Vulnerability

LOW 34

Windows Domain Name Service Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.01133 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +5 CWE-416

TI-2023-12857 CVE-2023-28308 · GHSA-9567-mjrh-x6xx

Windows DNS Server Remote Code Execution Vulnerability

LOW 33

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00853 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +5 CWE-416

TI-2023-12856 CVE-2023-28307 · GHSA-4vmw-3cp6-84qx

Windows DNS Server Remote Code Execution Vulnerability

LOW 33

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00853 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +5 CWE-416

TI-2023-12855 CVE-2023-28306 · GHSA-c546-r2m2-7xpc

Windows DNS Server Remote Code Execution Vulnerability

LOW 33

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00853 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +5 CWE-416

TI-2023-12854 CVE-2023-28305 · GHSA-p8m6-wrxf-jgx7

Windows DNS Server Remote Code Execution Vulnerability

LOW 33

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00853 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +5 CWE-416

TI-2023-12833 CVE-2023-28278 · GHSA-pj93-433x-mvh5

Windows DNS Server Remote Code Execution Vulnerability

LOW 33

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00853 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +5 CWE-591

TI-2023-12822 CVE-2023-28267 · GHSA-mqgq-m2wx-8xxh

Remote Desktop Protocol Client Information Disclosure Vulnerability

LOW 33

Remote Desktop Protocol Client Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.02086 Published 2023-04-11 Fixed in 10.0.17763.4252, 1.2.4157.0 +11 CWE-126

TI-2023-12816 CVE-2023-28256 · GHSA-q6rx-9hw3-3r8g

Windows DNS Server Remote Code Execution Vulnerability

LOW 33

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00836 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +5 CWE-591

TI-2023-12815 CVE-2023-28255 · GHSA-f547-3jjx-5mx6

Windows DNS Server Remote Code Execution Vulnerability

LOW 33

Windows DNS Server Remote Code Execution Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00836 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +5 CWE-591

TI-2023-12780 CVE-2023-28216 · GHSA-xqj5-4q2p-7gm5

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

LOW 33

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00372 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11

TI-2023-12821 CVE-2023-28266 · GHSA-7mmq-442r-m49h

Windows Common Log File System Driver Information Disclosure Vulnerability

LOW 32

Windows Common Log File System Driver Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.04361 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-126

TI-2023-12786 CVE-2023-28222 · GHSA-m7rq-qh6x-9m8q

Windows Kernel Elevation of Privilege Vulnerability

LOW 32

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00683 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-59

TI-2023-12826 CVE-2023-28271 · GHSA-86hj-4q76-h6c7

Windows Kernel Memory Information Disclosure Vulnerability

LOW 27

Windows Kernel Memory Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.01164 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-200

TI-2023-08112 CVE-2023-21729 · GHSA-q6p2-wmcr-m7v3

Remote Procedure Call Runtime Information Disclosure Vulnerability

LOW 27

Remote Procedure Call Runtime Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01348 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-125

TI-2023-12847 CVE-2023-28298 · GHSA-fh73-7w3w-55q3

Windows Kernel Denial of Service Vulnerability

LOW 26

Windows Kernel Denial of Service Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00566 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11

TI-2023-12813 CVE-2023-28253 · GHSA-j96j-pqmj-vx5q

Windows Kernel Information Disclosure Vulnerability

LOW 26

Windows Kernel Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00555 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11

TI-2023-12792 CVE-2023-28228 · GHSA-vm5p-f42w-775j

Windows Spoofing Vulnerability

LOW 25

Windows Spoofing Vulnerability

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00453 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11 CWE-347

TI-2023-12831 CVE-2023-28276 · GHSA-q2jg-4rq6-p528

Windows Group Policy Security Feature Bypass Vulnerability

LOW 21

Windows Group Policy Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00461 Published 2023-04-11 Fixed in 10.0.17763.4252, 10.0.20348.1668 +11