Microsoft Patch Tuesday, February 2023: the CVEs

Microsoft Patch Tuesday February 2023: the CVEs Microsoft published on 14 February 2023, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Jan 2023, Dec 2022, Nov 2022, Oct 2022, Sep 2022, Aug 2022, Jul 2022, Jun 2022, May 2022, Apr 2022, Mar 2022, Feb 2022. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 7.8CVE-2023-23381EPSS 0.4%2023-02-14

   Visual Studio Remote Code Execution Vulnerability

2. 7.8CVE-2023-21823KEVEPSS 5.6%2023-02-14

   Windows Graphics Component Remote Code Execution Vulnerability

3. 7.8CVE-2023-21815EPSS 0.5%2023-02-14

   Visual Studio Remote Code Execution Vulnerability

4. 7.8CVE-2023-21808EPSS 1.1%2023-02-14

   .NET and Visual Studio Remote Code Execution Vulnerability

5. 8.0CVE-2023-21778EPSS 1.0%2023-02-14

   Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability

6. 5.6CVE-2023-21567EPSS 0.8%2023-02-14

   Visual Studio Denial of Service Vulnerability

7. 7.8CVE-2023-21566EPSS 0.4%2023-02-14

   Visual Studio Elevation of Privilege Vulnerability

8. 7.5CVE-2023-21553EPSS 1.4%2023-02-14

   Azure DevOps Server Remote Code Execution Vulnerability

9. 7.8CVE-2023-23390EPSS 0.7%2023-02-14

   3D Builder Remote Code Execution Vulnerability

10. 6.5CVE-2023-23382EPSS 2.7%2023-02-14

    Azure Machine Learning Compute Instance Information Disclosure Vulnerability

11. 7.8CVE-2023-23379EPSS 0.4%2023-02-14

    Microsoft Defender for IoT Elevation of Privilege Vulnerability

12. 7.8CVE-2023-23378EPSS 0.7%2023-02-14

    Print 3D Remote Code Execution Vulnerability

13. 7.8CVE-2023-23377EPSS 0.7%2023-02-14

    3D Builder Remote Code Execution Vulnerability

14. 7.8CVE-2023-23376KEVEPSS 11%2023-02-14

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

15. 8.3CVE-2023-23374EPSS 1.1%2023-02-14

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

16. 7.8CVE-2023-21822EPSS 0.8%2023-02-14

    Windows Graphics Component Elevation of Privilege Vulnerability

17. 7.4CVE-2023-21820EPSS 0.6%2023-02-14

    Windows Distributed File System (DFS) Remote Code Execution Vulnerability

18. 7.5CVE-2023-21819EPSS 31%2023-02-14

    Windows Secure Channel Denial of Service Vulnerability

19. 7.5CVE-2023-21818EPSS 43%2023-02-14

    Windows Secure Channel Denial of Service Vulnerability

20. 7.8CVE-2023-21817EPSS 0.8%2023-02-14

    Windows Kerberos Elevation of Privilege Vulnerability

21. 7.5CVE-2023-21816EPSS 1.7%2023-02-14

    Windows Active Directory Domain Services API Denial of Service Vulnerability

22. 7.5CVE-2023-21813EPSS 1.7%2023-02-14

    Windows Secure Channel Denial of Service Vulnerability

23. 7.8CVE-2023-21812EPSS 3.3%2023-02-14

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

24. 7.5CVE-2023-21811EPSS 1.7%2023-02-14

    Windows iSCSI Service Denial of Service Vulnerability

25. 7.8CVE-2023-21809EPSS 0.6%2023-02-14

    Microsoft Defender for Endpoint Security Feature Bypass Vulnerability

26. 6.5CVE-2023-21807EPSS 0.7%2023-02-14

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

27. 8.2CVE-2023-21806EPSS 0.8%2023-02-14

    Power BI Report Server Spoofing Vulnerability

28. 7.8CVE-2023-21805EPSS 0.7%2023-02-14

    Windows MSHTML Platform Remote Code Execution Vulnerability

29. 7.8CVE-2023-21804EPSS 0.4%2023-02-14

    Windows Graphics Component Elevation of Privilege Vulnerability

30. 9.8CVE-2023-21803EPSS 1.8%2023-02-14

    Windows iSCSI Discovery Service Remote Code Execution Vulnerability

31. 7.8CVE-2023-21802EPSS 0.6%2023-02-14

    Windows Media Remote Code Execution Vulnerability

32. 7.8CVE-2023-21801EPSS 0.4%2023-02-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

33. 7.8CVE-2023-21800EPSS 1.1%2023-02-14

    Windows Installer Elevation of Privilege Vulnerability

34. 8.8CVE-2023-21799EPSS 1.2%2023-02-14

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

35. 8.8CVE-2023-21798EPSS 1.2%2023-02-14

    Microsoft ODBC Driver Remote Code Execution Vulnerability

36. 8.8CVE-2023-21797EPSS 1.2%2023-02-14

    Microsoft ODBC Driver Remote Code Execution Vulnerability

37. 4.3CVE-2023-21794EPSS 0.7%2023-02-14

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

38. 8.7CVE-2023-21777EPSS 0.3%2023-02-14

    Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

39. 5.0CVE-2023-21722EPSS 0.9%2023-02-14

    .NET Framework Denial of Service Vulnerability

40. 6.5CVE-2023-21721EPSS 0.9%2023-02-14

    Microsoft OneNote Elevation of Privilege Vulnerability

41. 5.3CVE-2023-21720EPSS 1.2%2023-02-14

    Microsoft Edge (Chromium-based) Tampering Vulnerability

42. 7.8CVE-2023-21718EPSS 0.7%2023-02-14

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

43. 8.8CVE-2023-21717EPSS 1.1%2023-02-14

    Microsoft SharePoint Server Elevation of Privilege Vulnerability

44. 9.8CVE-2023-21716EPSS 85%2023-02-14

    Microsoft Word Remote Code Execution Vulnerability

45. 7.3CVE-2023-21715KEVEPSS 12%2023-02-14

    Microsoft Publisher Security Feature Bypass Vulnerability

46. 5.5CVE-2023-21714EPSS 0.6%2023-02-14

    Microsoft Office Information Disclosure Vulnerability

47. 8.8CVE-2023-21713EPSS 1.8%2023-02-14

    Microsoft SQL Server Remote Code Execution Vulnerability

48. 7.2CVE-2023-21710EPSS 7.9%2023-02-14

    Microsoft Exchange Server Remote Code Execution Vulnerability

49. 8.8CVE-2023-21707EPSS 80%2023-02-14

    Microsoft Exchange Server Remote Code Execution Vulnerability

50. 8.8CVE-2023-21706EPSS 4.1%2023-02-14

    Microsoft Exchange Server Remote Code Execution Vulnerability

51. 8.8CVE-2023-21705EPSS 1.1%2023-02-14

    Microsoft SQL Server Remote Code Execution Vulnerability

52. 7.8CVE-2023-21704EPSS 0.4%2023-02-14

    Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

53. 7.2CVE-2023-21703EPSS 1.5%2023-02-14

    Azure Data Box Gateway Remote Code Execution Vulnerability

54. 7.5CVE-2023-21702EPSS 1.7%2023-02-14

    Windows iSCSI Service Denial of Service Vulnerability

55. 7.5CVE-2023-21701EPSS 1.7%2023-02-14

    Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability

56. 7.5CVE-2023-21700EPSS 1.7%2023-02-14

    Windows iSCSI Discovery Service Denial of Service Vulnerability

57. 5.3CVE-2023-21699EPSS 1.1%2023-02-14

    Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

58. 5.5CVE-2023-21697EPSS 0.5%2023-02-14

    Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

59. 8.8CVE-2023-21695EPSS 1.1%2023-02-14

    Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

60. 6.8CVE-2023-21694EPSS 0.6%2023-02-14

    Windows Fax Service Remote Code Execution Vulnerability

61. 5.7CVE-2023-21693EPSS 1.4%2023-02-14

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

62. 9.8CVE-2023-21692EPSS 21%2023-02-14

    Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

63. 7.5CVE-2023-21691EPSS 1.4%2023-02-14

    Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability

64. 9.8CVE-2023-21690EPSS 28%2023-02-14

    Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

65. 9.8CVE-2023-21689EPSS 27%2023-02-14

    Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

66. 7.8CVE-2023-21688EPSS 3.6%2023-02-14

    NT OS Kernel Elevation of Privilege Vulnerability

67. 5.5CVE-2023-21687EPSS 0.5%2023-02-14

    HTTP.sys Information Disclosure Vulnerability

68. 8.8CVE-2023-21686EPSS 1.2%2023-02-14

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

69. 8.8CVE-2023-21685EPSS 1.2%2023-02-14

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

70. 8.8CVE-2023-21684EPSS 1.3%2023-02-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

71. 5.4CVE-2023-21573EPSS 0.6%2023-02-14

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

72. 6.5CVE-2023-21572EPSS 0.6%2023-02-14

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

73. 5.4CVE-2023-21571EPSS 0.6%2023-02-14

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

74. 5.4CVE-2023-21570EPSS 0.6%2023-02-14

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

75. 7.3CVE-2023-21568EPSS 0.9%2023-02-14

    Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability

76. 7.1CVE-2023-21564EPSS 0.9%2023-02-14

    Azure DevOps Server Cross-Site Scripting Vulnerability

77. 8.8CVE-2023-21529KEVEPSS 59%2023-02-14

    Microsoft Exchange Server Remote Code Execution Vulnerability

78. 7.8CVE-2023-21528EPSS 0.4%2023-02-14

    Microsoft SQL Server Remote Code Execution Vulnerability