Microsoft Patch Tuesday, March 2023: the CVEs

Microsoft Patch Tuesday March 2023: the CVEs Microsoft published on 14 March 2023, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Feb 2023, Jan 2023, Dec 2022, Nov 2022, Oct 2022, Sep 2022, Aug 2022, Jul 2022, Jun 2022, May 2022, Apr 2022, Mar 2022. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 7.8CVE-2023-24930EPSS 0.5%2023-03-14

   Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

2. 5.5CVE-2023-24923EPSS 0.8%2023-03-14

   Microsoft OneDrive for Android Information Disclosure Vulnerability

3. 6.5CVE-2023-24922EPSS 1.5%2023-03-14

   Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

4. 5.4CVE-2023-24921EPSS 0.6%2023-03-14

   Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

5. 5.4CVE-2023-24920EPSS 0.3%2023-03-14

   Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

6. 5.4CVE-2023-24919EPSS 0.6%2023-03-14

   Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

7. 8.8CVE-2023-24913EPSS 1.3%2023-03-14

   Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

8. 4.3CVE-2023-24911EPSS 1.1%2023-03-14

   Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

9. 7.8CVE-2023-24910EPSS 0.4%2023-03-14

   Windows Graphics Component Elevation of Privilege Vulnerability

10. 8.8CVE-2023-24909EPSS 1.3%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

11. 8.1CVE-2023-24908EPSS 1.0%2023-03-14

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

12. 8.8CVE-2023-24907EPSS 1.3%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

13. 6.5CVE-2023-24906EPSS 1.5%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

14. 8.2CVE-2023-24892ExploitEPSS 3.5%2023-03-14

    Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

15. 5.4CVE-2023-24891EPSS 0.6%2023-03-14

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

16. 6.5CVE-2023-24890EPSS 1.2%2023-03-14

    Microsoft OneDrive for iOS Security Feature Bypass Vulnerability

17. 5.5CVE-2023-24882EPSS 0.7%2023-03-14

    Microsoft OneDrive for Android Information Disclosure Vulnerability

18. 4.4CVE-2023-24880KEVEPSS 78%2023-03-14

    Windows SmartScreen Security Feature Bypass Vulnerability

19. 5.4CVE-2023-24879EPSS 0.6%2023-03-14

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

20. 8.8CVE-2023-24876EPSS 1.4%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

21. 8.8CVE-2023-24872EPSS 1.3%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

22. 8.8CVE-2023-24871EPSS 3.2%2023-03-14

    Windows Bluetooth Service Remote Code Execution Vulnerability

23. 6.5CVE-2023-24870EPSS 1.5%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

24. 8.1CVE-2023-24869EPSS 1.0%2023-03-14

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

25. 8.8CVE-2023-24868EPSS 1.3%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

26. 8.8CVE-2023-24867EPSS 1.3%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

27. 6.5CVE-2023-24866EPSS 1.5%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

28. 6.5CVE-2023-24865EPSS 1.5%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

29. 8.8CVE-2023-24864EPSS 1.3%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability

30. 6.5CVE-2023-24863EPSS 1.5%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

31. 5.5CVE-2023-24862EPSS 0.5%2023-03-14

    Windows Secure Channel Denial of Service Vulnerability

32. 7.0CVE-2023-24861EPSS 0.3%2023-03-14

    Windows Graphics Component Elevation of Privilege Vulnerability

33. 7.5CVE-2023-24859EPSS 1.7%2023-03-14

    Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

34. 7.5CVE-2023-24858EPSS 1.4%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

35. 6.5CVE-2023-24857EPSS 1.5%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

36. 7.5CVE-2023-24856EPSS 1.5%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

37. 7.8CVE-2023-23423EPSS 0.6%2023-03-14

    Windows Kernel Elevation of Privilege Vulnerability

38. 7.8CVE-2023-23422EPSS 0.6%2023-03-14

    Windows Kernel Elevation of Privilege Vulnerability

39. 7.8CVE-2023-23421EPSS 0.7%2023-03-14

    Windows Kernel Elevation of Privilege Vulnerability

40. 7.8CVE-2023-23420EPSS 0.7%2023-03-14

    Windows Kernel Elevation of Privilege Vulnerability

41. 7.8CVE-2023-23419EPSS 0.4%2023-03-14

    Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

42. 7.8CVE-2023-23418EPSS 0.4%2023-03-14

    Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

43. 7.8CVE-2023-23417EPSS 0.4%2023-03-14

    Windows Partition Management Driver Elevation of Privilege Vulnerability

44. 7.8CVE-2023-23416EPSS 7.6%2023-03-14

    Windows Cryptographic Services Remote Code Execution Vulnerability

45. 9.8CVE-2023-23415EPSS 3.5%2023-03-14

    Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability

46. 7.1CVE-2023-23414EPSS 0.4%2023-03-14

    Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

47. 8.8CVE-2023-23413EPSS 1.3%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

48. 7.8CVE-2023-23412EPSS 0.3%2023-03-14

    Windows Accounts Picture Elevation of Privilege Vulnerability

49. 6.5CVE-2023-23411EPSS 0.6%2023-03-14

    Windows Hyper-V Denial of Service Vulnerability

50. 7.8CVE-2023-23410EPSS 8.0%2023-03-14

    Windows HTTP.sys Elevation of Privilege Vulnerability

51. 5.5CVE-2023-23409EPSS 0.5%2023-03-14

    Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

52. 4.5CVE-2023-23408ExploitEPSS 4.0%2023-03-14

    Azure Apache Ambari Spoofing Vulnerability

53. 7.1CVE-2023-23407EPSS 0.4%2023-03-14

    Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

54. 8.8CVE-2023-23406EPSS 1.3%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

55. 8.1CVE-2023-23405EPSS 1.0%2023-03-14

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

56. 8.1CVE-2023-23404EPSS 0.8%2023-03-14

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

57. 8.8CVE-2023-23403EPSS 1.3%2023-03-14

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

58. 7.8CVE-2023-23402EPSS 0.6%2023-03-14

    Windows Media Remote Code Execution Vulnerability

59. 7.8CVE-2023-23401EPSS 0.6%2023-03-14

    Windows Media Remote Code Execution Vulnerability

60. 7.2CVE-2023-23400EPSS 1.3%2023-03-14

    Windows DNS Server Remote Code Execution Vulnerability

61. 7.8CVE-2023-23399ExploitEPSS 2.5%2023-03-14

    Microsoft Excel Remote Code Execution Vulnerability

62. 7.1CVE-2023-23398EPSS 0.6%2023-03-14

    Microsoft Excel Spoofing Vulnerability

63. 9.8CVE-2023-23397KEVEPSS 97%2023-03-14

    Microsoft Outlook Elevation of Privilege Vulnerability

64. 6.5CVE-2023-23396EPSS 3.8%2023-03-14

    Microsoft Excel Denial of Service Vulnerability

65. 3.1CVE-2023-23395EPSS 0.6%2023-03-14

    Microsoft SharePoint Server Spoofing Vulnerability

66. 5.5CVE-2023-23394EPSS 0.5%2023-03-14

    Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

67. 7.0CVE-2023-23393EPSS 0.2%2023-03-14

    Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability

68. 9.8CVE-2023-23392EPSS 1.7%2023-03-14

    HTTP Protocol Stack Remote Code Execution Vulnerability

69. 5.5CVE-2023-23391EPSS 0.6%2023-03-14

    Office for Android Spoofing Vulnerability

70. 6.3CVE-2023-23389EPSS 0.3%2023-03-14

    Microsoft Defender Elevation of Privilege Vulnerability

71. 8.8CVE-2023-23388EPSS 1.6%2023-03-14

    Windows Bluetooth Driver Elevation of Privilege Vulnerability

72. 7.0CVE-2023-23385EPSS 0.3%2023-03-14

    Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability

73. 4.7CVE-2023-23383EPSS 12%2023-03-14

    Service Fabric Explorer Spoofing Vulnerability

74. 9.8CVE-2023-21708EPSS 1.5%2023-03-14

    Remote Procedure Call Runtime Remote Code Execution Vulnerability