Microsoft Patch Tuesday, January 2023: the CVEs

Microsoft Patch Tuesday January 2023: the CVEs Microsoft published on 10 January 2023, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Dec 2022, Nov 2022, Oct 2022, Sep 2022, Aug 2022, Jul 2022, Jun 2022, May 2022, Apr 2022, Mar 2022, Feb 2022, Jan 2022. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 7.8CVE-2023-21793EPSS 1.0%2023-01-10

   3D Builder Remote Code Execution Vulnerability

2. 7.8CVE-2023-21792EPSS 1.0%2023-01-10

   3D Builder Remote Code Execution Vulnerability

3. 7.8CVE-2023-21791EPSS 1.0%2023-01-10

   3D Builder Remote Code Execution Vulnerability

4. 7.8CVE-2023-21790EPSS 1.0%2023-01-10

   3D Builder Remote Code Execution Vulnerability

5. 7.8CVE-2023-21789EPSS 1.0%2023-01-10

   3D Builder Remote Code Execution Vulnerability

6. 7.8CVE-2023-21788EPSS 1.0%2023-01-10

   3D Builder Remote Code Execution Vulnerability

7. 7.8CVE-2023-21787EPSS 1.0%2023-01-10

   3D Builder Remote Code Execution Vulnerability

8. 7.8CVE-2023-21786EPSS 1.0%2023-01-10

   3D Builder Remote Code Execution Vulnerability

9. 7.8CVE-2023-21785EPSS 1.0%2023-01-10

   3D Builder Remote Code Execution Vulnerability

10. 7.8CVE-2023-21784EPSS 1.0%2023-01-10

    3D Builder Remote Code Execution Vulnerability

11. 7.8CVE-2023-21783EPSS 1.2%2023-01-10

    3D Builder Remote Code Execution Vulnerability

12. 7.8CVE-2023-21782EPSS 1.0%2023-01-10

    3D Builder Remote Code Execution Vulnerability

13. 7.8CVE-2023-21781EPSS 1.0%2023-01-10

    3D Builder Remote Code Execution Vulnerability

14. 7.8CVE-2023-21780EPSS 1.0%2023-01-10

    3D Builder Remote Code Execution Vulnerability

15. 7.8CVE-2023-21779EPSS 2.1%2023-01-10

    Visual Studio Code Remote Code Execution Vulnerability

16. 5.5CVE-2023-21776EPSS 1.1%2023-01-10

    Windows Kernel Information Disclosure Vulnerability

17. 7.8CVE-2023-21774EPSS 0.8%2023-01-10

    Windows Kernel Elevation of Privilege Vulnerability

18. 7.8CVE-2023-21773EPSS 0.7%2023-01-10

    Windows Kernel Elevation of Privilege Vulnerability

19. 7.8CVE-2023-21772EPSS 0.8%2023-01-10

    Windows Kernel Elevation of Privilege Vulnerability

20. 7.0CVE-2023-21771EPSS 0.4%2023-01-10

    Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability

21. 7.8CVE-2023-21768ExploitEPSS 65%2023-01-10

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

22. 7.8CVE-2023-21767EPSS 0.5%2023-01-10

    Windows Overlay Filter Elevation of Privilege Vulnerability

23. 4.7CVE-2023-21766EPSS 0.9%2023-01-10

    Windows Overlay Filter Information Disclosure Vulnerability

24. 7.8CVE-2023-21765EPSS 0.5%2023-01-10

    Windows Print Spooler Elevation of Privilege Vulnerability

25. 7.8CVE-2023-21764EPSS 0.5%2023-01-10

    Microsoft Exchange Server Elevation of Privilege Vulnerability

26. 7.8CVE-2023-21763EPSS 0.6%2023-01-10

    Microsoft Exchange Server Elevation of Privilege Vulnerability

27. 8.0CVE-2023-21762EPSS 1.5%2023-01-10

    Microsoft Exchange Server Spoofing Vulnerability

28. 7.5CVE-2023-21761EPSS 1.7%2023-01-10

    Microsoft Exchange Server Information Disclosure Vulnerability

29. 7.1CVE-2023-21760EPSS 0.6%2023-01-10

    Windows Print Spooler Elevation of Privilege Vulnerability

30. 3.3CVE-2023-21759EPSS 0.6%2023-01-10

    Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability

31. 7.5CVE-2023-21758EPSS 93%2023-01-10

    Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

32. 7.5CVE-2023-21757EPSS 2.1%2023-01-10

    Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability

33. 7.8CVE-2023-21755EPSS 0.5%2023-01-10

    Windows Kernel Elevation of Privilege Vulnerability

34. 7.8CVE-2023-21754EPSS 0.5%2023-01-10

    Windows Kernel Elevation of Privilege Vulnerability

35. 5.5CVE-2023-21753EPSS 0.7%2023-01-10

    Event Tracing for Windows Information Disclosure Vulnerability

36. 7.1CVE-2023-21752ExploitEPSS 5.5%2023-01-10

    Windows Backup Service Elevation of Privilege Vulnerability

37. 7.1CVE-2023-21750EPSS 0.8%2023-01-10

    Windows Kernel Elevation of Privilege Vulnerability

38. 7.8CVE-2023-21749EPSS 0.9%2023-01-10

    Windows Kernel Elevation of Privilege Vulnerability

39. 7.8CVE-2023-21748EPSS 0.9%2023-01-10

    Windows Kernel Elevation of Privilege Vulnerability

40. 7.8CVE-2023-21747EPSS 0.9%2023-01-10

    Windows Kernel Elevation of Privilege Vulnerability

41. 7.8CVE-2023-21746EPSS 2.5%2023-01-10

    Windows NTLM Elevation of Privilege Vulnerability

42. 8.0CVE-2023-21745EPSS 1.4%2023-01-10

    Microsoft Exchange Server Spoofing Vulnerability

43. 8.8CVE-2023-21744EPSS 3.1%2023-01-10

    Microsoft SharePoint Server Remote Code Execution Vulnerability

44. 5.3CVE-2023-21743EPSS 1.1%2023-01-10

    Microsoft SharePoint Server Security Feature Bypass Vulnerability

45. 8.8CVE-2023-21742EPSS 56%2023-01-10

    Microsoft SharePoint Server Remote Code Execution Vulnerability

46. 7.1CVE-2023-21741EPSS 1.9%2023-01-10

    Microsoft Office Visio Information Disclosure Vulnerability

47. 7.0CVE-2023-21739EPSS 0.6%2023-01-10

    Windows Bluetooth Driver Elevation of Privilege Vulnerability

48. 7.8CVE-2023-21738EPSS 0.7%2023-01-10

    Microsoft Office Visio Remote Code Execution Vulnerability

49. 7.8CVE-2023-21737EPSS 0.8%2023-01-10

    Microsoft Office Visio Remote Code Execution Vulnerability

50. 7.8CVE-2023-21736EPSS 0.8%2023-01-10

    Microsoft Office Visio Remote Code Execution Vulnerability

51. 7.8CVE-2023-21735EPSS 0.8%2023-01-10

    Microsoft Office Remote Code Execution Vulnerability

52. 7.8CVE-2023-21734EPSS 1.0%2023-01-10

    Microsoft Office Remote Code Execution Vulnerability

53. 7.0CVE-2023-21733EPSS 0.3%2023-01-10

    Windows Bind Filter Driver Elevation of Privilege Vulnerability

54. 8.8CVE-2023-21732EPSS 1.5%2023-01-10

    Microsoft ODBC Driver Remote Code Execution Vulnerability

55. 7.8CVE-2023-21730EPSS 0.5%2023-01-10

    Microsoft Cryptographic Services Elevation of Privilege Vulnerability

56. 7.5CVE-2023-21728EPSS 2.1%2023-01-10

    Windows Netlogon Denial of Service Vulnerability

57. 7.8CVE-2023-21726EPSS 0.5%2023-01-10

    Windows Credential Manager User Interface Elevation of Privilege Vulnerability

58. 6.3CVE-2023-21725EPSS 0.4%2023-01-10

    Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability

59. 7.8CVE-2023-21724EPSS 0.5%2023-01-10

    Microsoft DWM Core Library Elevation of Privilege Vulnerability

60. 7.5CVE-2023-21683EPSS 2.1%2023-01-10

    Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

61. 5.3CVE-2023-21682EPSS 1.5%2023-01-10

    Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability

62. 8.8CVE-2023-21681EPSS 1.5%2023-01-10

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

63. 7.8CVE-2023-21680EPSS 0.5%2023-01-10

    Windows Win32k Elevation of Privilege Vulnerability

64. 8.1CVE-2023-21679EPSS 1.1%2023-01-10

    Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

65. 7.8CVE-2023-21678EPSS 0.5%2023-01-10

    Windows Print Spooler Elevation of Privilege Vulnerability

66. 7.5CVE-2023-21677EPSS 2.1%2023-01-10

    Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

67. 8.8CVE-2023-21676EPSS 1.6%2023-01-10

    Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

68. 7.8CVE-2023-21675EPSS 0.9%2023-01-10

    Windows Kernel Elevation of Privilege Vulnerability

69. 8.8CVE-2023-21674KEVEPSS 34%2023-01-10

    Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

70. 6.8CVE-2023-21563EPSS 1.5%2023-01-10

    BitLocker Security Feature Bypass Vulnerability

71. 7.8CVE-2023-21561EPSS 0.5%2023-01-10

    Microsoft Cryptographic Services Elevation of Privilege Vulnerability

72. 6.6CVE-2023-21560EPSS 1.2%2023-01-10

    Windows Boot Manager Security Feature Bypass Vulnerability

73. 5.5CVE-2023-21559EPSS 0.6%2023-01-10

    Windows Cryptographic Information Disclosure Vulnerability

74. 7.8CVE-2023-21558EPSS 0.5%2023-01-10

    Windows Error Reporting Service Elevation of Privilege Vulnerability

75. 7.5CVE-2023-21557EPSS 2.2%2023-01-10

    Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

76. 8.1CVE-2023-21556EPSS 1.4%2023-01-10

    Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

77. 8.1CVE-2023-21555EPSS 1.1%2023-01-10

    Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

78. 7.8CVE-2023-21552EPSS 3.5%2023-01-10

    Windows GDI Elevation of Privilege Vulnerability

79. 7.8CVE-2023-21551EPSS 0.5%2023-01-10

    Microsoft Cryptographic Services Elevation of Privilege Vulnerability

80. 5.5CVE-2023-21550EPSS 0.6%2023-01-10

    Windows Cryptographic Information Disclosure Vulnerability

81. 8.8CVE-2023-21549EPSS 1.4%2023-01-10

    Windows SMB Witness Service Elevation of Privilege Vulnerability

82. 8.1CVE-2023-21548EPSS 1.0%2023-01-10

    Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

83. 7.5CVE-2023-21547EPSS 89%2023-01-10

    Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

84. 8.1CVE-2023-21546EPSS 1.1%2023-01-10

    Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

85. 8.1CVE-2023-21543EPSS 1.7%2023-01-10

    Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

86. 7.0CVE-2023-21542EPSS 0.3%2023-01-10

    Windows Installer Elevation of Privilege Vulnerability

87. 7.8CVE-2023-21541EPSS 0.5%2023-01-10

    Windows Task Scheduler Elevation of Privilege Vulnerability

88. 5.5CVE-2023-21540EPSS 0.6%2023-01-10

    Windows Cryptographic Information Disclosure Vulnerability

89. 7.5CVE-2023-21539EPSS 1.3%2023-01-10

    Windows Authentication Remote Code Execution Vulnerability

90. 7.5CVE-2023-21538EPSS 3.0%2023-01-10

    .NET Denial of Service Vulnerability

91. 7.8CVE-2023-21537EPSS 0.6%2023-01-10

    Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

92. 4.7CVE-2023-21536EPSS 0.4%2023-01-10

    Event Tracing for Windows Information Disclosure Vulnerability

93. 8.1CVE-2023-21535EPSS 1.0%2023-01-10

    Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

94. 7.0CVE-2023-21532EPSS 0.4%2023-01-10

    Windows GDI Elevation of Privilege Vulnerability

95. 7.0CVE-2023-21531EPSS 0.6%2023-01-10

    Azure Service Fabric Container Elevation of Privilege Vulnerability

96. 7.5CVE-2023-21527EPSS 2.1%2023-01-10

    Windows iSCSI Service Denial of Service Vulnerability

97. 5.3CVE-2023-21525EPSS 1.6%2023-01-10

    Remote Procedure Call Runtime Denial of Service Vulnerability

98. 7.8CVE-2023-21524EPSS 0.4%2023-01-10

    Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability