Microsoft Patch Tuesday, April 2023: the CVEs

Microsoft Patch Tuesday April 2023: the CVEs Microsoft published on 11 April 2023, the second Tuesday of the month, with CVSS, EPSS, CISA KEV and public exploits to show what to patch first. Narrow it: in CISA KEV · critical. The same day: Adobe, SAP. Earlier: Mar 2023, Feb 2023, Jan 2023, Dec 2022, Nov 2022, Oct 2022, Sep 2022, Aug 2022, Jul 2022, Jun 2022, May 2022, Apr 2022. Other lists: CISA KEV list, CVE exploit search, Latest critical CVEs, Ransomware CVEs, New CVEs today, This week, Patch Tuesday

1. 6.1CVE-2023-28314EPSS 0.7%2023-04-11

   Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

2. 6.1CVE-2023-28313EPSS 0.7%2023-04-11

   Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability

3. 6.5CVE-2023-28312EPSS 1.5%2023-04-11

   Azure Machine Learning Information Disclosure Vulnerability

4. 7.8CVE-2023-28311ExploitEPSS 2.7%2023-04-11

   Microsoft Word Remote Code Execution Vulnerability

5. 5.4CVE-2023-28309EPSS 0.7%2023-04-11

   Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

6. 6.6CVE-2023-28308EPSS 0.9%2023-04-11

   Windows DNS Server Remote Code Execution Vulnerability

7. 6.6CVE-2023-28307EPSS 0.9%2023-04-11

   Windows DNS Server Remote Code Execution Vulnerability

8. 6.6CVE-2023-28306EPSS 0.9%2023-04-11

   Windows DNS Server Remote Code Execution Vulnerability

9. 6.6CVE-2023-28305EPSS 0.9%2023-04-11

   Windows DNS Server Remote Code Execution Vulnerability

10. 7.8CVE-2023-28304EPSS 0.8%2023-04-11

    Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

11. 7.5CVE-2023-28302EPSS 93%2023-04-11

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

12. 3.7CVE-2023-28301EPSS 0.9%2023-04-11

    Microsoft Edge (Chromium-based) Tampering Vulnerability

13. 7.5CVE-2023-28300EPSS 1.0%2023-04-11

    Azure Service Connector Security Feature Bypass Vulnerability

14. 5.5CVE-2023-28299EPSS 0.5%2023-04-11

    Visual Studio Spoofing Vulnerability

15. 5.5CVE-2023-28298EPSS 0.6%2023-04-11

    Windows Kernel Denial of Service Vulnerability

16. 8.8CVE-2023-28297EPSS 1.7%2023-04-11

    Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability

17. 7.8CVE-2023-28296EPSS 0.7%2023-04-11

    Visual Studio Remote Code Execution Vulnerability

18. 7.8CVE-2023-28293ExploitEPSS 2.9%2023-04-11

    Windows Kernel Elevation of Privilege Vulnerability

19. 7.8CVE-2023-28292EPSS 0.6%2023-04-11

    Raw Image Extension Remote Code Execution Vulnerability

20. 7.8CVE-2023-28291EPSS 0.6%2023-04-11

    Raw Image Extension Remote Code Execution Vulnerability

21. 8.1CVE-2023-28288ExploitEPSS 6.2%2023-04-11

    Microsoft SharePoint Server Spoofing Vulnerability

22. 7.8CVE-2023-28285ExploitEPSS 3.0%2023-04-11

    Microsoft Office Remote Code Execution Vulnerability

23. 4.3CVE-2023-28284EPSS 0.8%2023-04-11

    Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

24. 6.6CVE-2023-28278EPSS 0.9%2023-04-11

    Windows DNS Server Remote Code Execution Vulnerability

25. 4.9CVE-2023-28277EPSS 1.4%2023-04-11

    Windows DNS Server Information Disclosure Vulnerability

26. 4.4CVE-2023-28276EPSS 0.5%2023-04-11

    Windows Group Policy Security Feature Bypass Vulnerability

27. 8.8CVE-2023-28275EPSS 1.5%2023-04-11

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

28. 7.8CVE-2023-28274EPSS 6.8%2023-04-11

    Windows Win32k Elevation of Privilege Vulnerability

29. 7.0CVE-2023-28273EPSS 0.2%2023-04-11

    Windows Clip Service Elevation of Privilege Vulnerability

30. 7.8CVE-2023-28272EPSS 0.5%2023-04-11

    Windows Kernel Elevation of Privilege Vulnerability

31. 5.5CVE-2023-28271EPSS 1.2%2023-04-11

    Windows Kernel Memory Information Disclosure Vulnerability

32. 6.8CVE-2023-28270EPSS 0.5%2023-04-11

    Windows Lock Screen Security Feature Bypass Vulnerability

33. 6.8CVE-2023-28269EPSS 0.6%2023-04-11

    Windows Boot Manager Security Feature Bypass Vulnerability

34. 8.1CVE-2023-28268EPSS 1.5%2023-04-11

    Netlogon RPC Elevation of Privilege Vulnerability

35. 6.5CVE-2023-28267EPSS 2.1%2023-04-11

    Remote Desktop Protocol Client Information Disclosure Vulnerability

36. 5.5CVE-2023-28266EPSS 4.4%2023-04-11

    Windows Common Log File System Driver Information Disclosure Vulnerability

37. 5.5CVE-2023-28263EPSS 0.6%2023-04-11

    Visual Studio Information Disclosure Vulnerability

38. 7.8CVE-2023-28262EPSS 0.4%2023-04-11

    Visual Studio Elevation of Privilege Vulnerability

39. 7.8CVE-2023-28260EPSS 1.5%2023-04-11

    .NET DLL Hijacking Remote Code Execution Vulnerability

40. 6.6CVE-2023-28256EPSS 0.8%2023-04-11

    Windows DNS Server Remote Code Execution Vulnerability

41. 6.6CVE-2023-28255EPSS 0.8%2023-04-11

    Windows DNS Server Remote Code Execution Vulnerability

42. 7.2CVE-2023-28254EPSS 1.4%2023-04-11

    Windows DNS Server Remote Code Execution Vulnerability

43. 5.5CVE-2023-28253EPSS 0.6%2023-04-11

    Windows Kernel Information Disclosure Vulnerability

44. 7.8CVE-2023-28252KEVExploitEPSS 49%2023-04-11

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

45. 9.8CVE-2023-28250EPSS 2.0%2023-04-11

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

46. 6.8CVE-2023-28249EPSS 0.6%2023-04-11

    Windows Boot Manager Security Feature Bypass Vulnerability

47. 7.8CVE-2023-28248EPSS 0.7%2023-04-11

    Windows Kernel Elevation of Privilege Vulnerability

48. 7.5CVE-2023-28247EPSS 1.6%2023-04-11

    Windows Network File System Information Disclosure Vulnerability

49. 7.8CVE-2023-28246EPSS 0.4%2023-04-11

    Windows Registry Elevation of Privilege Vulnerability

50. 8.1CVE-2023-28244EPSS 2.9%2023-04-11

    Windows Kerberos Elevation of Privilege Vulnerability

51. 8.8CVE-2023-28243EPSS 1.6%2023-04-11

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

52. 7.5CVE-2023-28241EPSS 2.0%2023-04-11

    Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability

53. 8.8CVE-2023-28240EPSS 0.8%2023-04-11

    Windows Network Load Balancing Remote Code Execution Vulnerability

54. 7.5CVE-2023-28238EPSS 0.9%2023-04-11

    Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

55. 7.8CVE-2023-28237EPSS 0.6%2023-04-11

    Windows Kernel Remote Code Execution Vulnerability

56. 7.8CVE-2023-28236EPSS 0.3%2023-04-11

    Windows Kernel Elevation of Privilege Vulnerability

57. 6.8CVE-2023-28235EPSS 0.5%2023-04-11

    Windows Lock Screen Security Feature Bypass Vulnerability

58. 7.5CVE-2023-28234EPSS 1.7%2023-04-11

    Windows Secure Channel Denial of Service Vulnerability

59. 7.5CVE-2023-28233EPSS 1.7%2023-04-11

    Windows Secure Channel Denial of Service Vulnerability

60. 7.5CVE-2023-28232EPSS 0.9%2023-04-11

    Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

61. 8.8CVE-2023-28231EPSS 37%2023-04-11

    DHCP Server Service Remote Code Execution Vulnerability

62. 7.0CVE-2023-28229KEVEPSS 1.7%2023-04-11

    Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

63. 5.5CVE-2023-28228EPSS 0.5%2023-04-11

    Windows Spoofing Vulnerability

64. 7.5CVE-2023-28227EPSS 6.6%2023-04-11

    Windows Bluetooth Driver Remote Code Execution Vulnerability

65. 5.3CVE-2023-28226EPSS 0.7%2023-04-11

    Windows Enroll Engine Security Feature Bypass Vulnerability

66. 7.8CVE-2023-28225EPSS 0.4%2023-04-11

    Windows NTLM Elevation of Privilege Vulnerability

67. 7.1CVE-2023-28224EPSS 0.4%2023-04-11

    Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

68. 6.6CVE-2023-28223EPSS 1.1%2023-04-11

    Windows Domain Name Service Remote Code Execution Vulnerability

69. 7.1CVE-2023-28222EPSS 0.7%2023-04-11

    Windows Kernel Elevation of Privilege Vulnerability

70. 7.0CVE-2023-28221EPSS 0.5%2023-04-11

    Windows Error Reporting Service Elevation of Privilege Vulnerability

71. 8.1CVE-2023-28220EPSS 15%2023-04-11

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

72. 8.1CVE-2023-28219EPSS 15%2023-04-11

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

73. 7.0CVE-2023-28218EPSS 12%2023-04-11

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

74. 7.5CVE-2023-28217EPSS 1.9%2023-04-11

    Windows Network Address Translation (NAT) Denial of Service Vulnerability

75. 7.0CVE-2023-28216EPSS 0.4%2023-04-11

    Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

76. 6.1CVE-2023-24935EPSS 1.0%2023-04-11

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

77. 7.5CVE-2023-24931EPSS 2.0%2023-04-11

    Windows Secure Channel Denial of Service Vulnerability

78. 8.8CVE-2023-24929EPSS 1.6%2023-04-11

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

79. 8.8CVE-2023-24928EPSS 1.6%2023-04-11

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

80. 8.8CVE-2023-24927EPSS 1.6%2023-04-11

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

81. 8.8CVE-2023-24926EPSS 1.6%2023-04-11

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

82. 8.8CVE-2023-24925EPSS 1.6%2023-04-11

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

83. 8.8CVE-2023-24924EPSS 1.6%2023-04-11

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

84. 7.0CVE-2023-24914EPSS 0.3%2023-04-11

    Win32k Elevation of Privilege Vulnerability

85. 7.8CVE-2023-24912EPSS 3.6%2023-04-11

    Windows Graphics Component Elevation of Privilege Vulnerability

86. 7.8CVE-2023-24893EPSS 1.1%2023-04-11

    Visual Studio Code Remote Code Execution Vulnerability

87. 8.8CVE-2023-24887EPSS 1.6%2023-04-11

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

88. 8.8CVE-2023-24886EPSS 1.6%2023-04-11

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

89. 8.8CVE-2023-24885EPSS 1.6%2023-04-11

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

90. 8.8CVE-2023-24884EPSS 1.6%2023-04-11

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

91. 6.5CVE-2023-24883EPSS 1.5%2023-04-11

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

92. 7.5CVE-2023-24860EPSS 3.1%2023-04-11

    Microsoft Defender Denial of Service Vulnerability

93. 7.3CVE-2023-23384EPSS 0.9%2023-04-11

    Microsoft SQL Server Remote Code Execution Vulnerability

94. 7.8CVE-2023-23375EPSS 0.7%2023-04-11

    Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

95. 7.5CVE-2023-21769EPSS 89%2023-04-11

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

96. 5.3CVE-2023-21729EPSS 1.3%2023-04-11

    Remote Procedure Call Runtime Information Disclosure Vulnerability

97. 8.8CVE-2023-21727EPSS 1.6%2023-04-11

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

98. 9.8CVE-2023-21554ExploitEPSS 95%2023-04-11

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability