{
  "fix": "KB5022838",
  "url": "https://patchblox.com/security/fix/microsoft/kb5022838",
  "summary": "KB5022838, released February 14, 2023, fixes 36 CVEs across 8 products. 2 of them are being exploited (CVE-2023-23376); 2 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "microsoft",
  "type": "kb",
  "releaseKind": "Security",
  "title": "February 2023 cumulative update for Windows 10 1607",
  "released": "2023-02-14T00:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2023-23376, exploited (CISA KEV, ransomware)",
  "supported": true,
  "cveCount": 36,
  "exploitedCveCount": 2,
  "kevCveCount": 2,
  "ransomwareCveCount": 1,
  "maxEpss": 0.43172,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://support.microsoft.com/help/5022838",
  "appliesTo": [
    {
      "product": "Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1607 for 32-bit Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/microsoft-.net-framework-3.5-and-4.7.2-on-windows-10-version-1607-for-32-bit-systems",
      "fixedVersion": "14393.5717",
      "supported": false
    },
    {
      "product": "Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1607 for x64-based Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/microsoft-.net-framework-3.5-and-4.7.2-on-windows-10-version-1607-for-x64-based-systems",
      "fixedVersion": "14393.5717",
      "supported": false
    },
    {
      "product": "Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016",
      "productUrl": "https://patchblox.com/security/product/microsoft/microsoft-.net-framework-3.5-and-4.7.2-on-windows-server-2016",
      "fixedVersion": "14393.5717",
      "supported": false
    },
    {
      "product": "Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016 (Server Core installation)",
      "productUrl": "https://patchblox.com/security/product/microsoft/microsoft-.net-framework-3.5-and-4.7.2-on-windows-server-2016-server-core-installation",
      "fixedVersion": "14393.5717",
      "supported": false
    },
    {
      "product": "Windows 10 Version 1607 for 32-bit Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-10-version-1607-for-32-bit-systems",
      "fixedVersion": "14393.5717",
      "supported": true
    },
    {
      "product": "Windows 10 Version 1607 for x64-based Systems",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-10-version-1607-for-x64-based-systems",
      "fixedVersion": "14393.5717",
      "supported": true
    },
    {
      "product": "Windows Server 2016",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-server-2016",
      "fixedVersion": "14393.5717",
      "supported": true
    },
    {
      "product": "Windows Server 2016 (Server Core installation)",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-server-2016-server-core-installation",
      "fixedVersion": "14393.5717",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2023-23376",
      "url": "https://patchblox.com/security/cve/CVE-2023-23376",
      "title": "Windows Common Log File System Driver Elevation of Privilege Vulnerability",
      "component": "Windows Common Log File System Driver",
      "impact": "Elevation of Privilege",
      "priority": "Patch now",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.10853,
      "kev": true,
      "ransomware": true,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21823",
      "url": "https://patchblox.com/security/cve/CVE-2023-21823",
      "title": "Windows Graphics Component Remote Code Execution Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Remote Code Execution",
      "priority": "Patch now",
      "severity": "Important",
      "cvss": 7.3,
      "epss": 0.05563,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21818",
      "url": "https://patchblox.com/security/cve/CVE-2023-21818",
      "title": "Windows Secure Channel Denial of Service Vulnerability",
      "component": "Windows SChannel",
      "impact": "Denial of Service",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.43172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21690",
      "url": "https://patchblox.com/security/cve/CVE-2023-21690",
      "title": "Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability",
      "component": "Windows Protected EAP (PEAP)",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.27737,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21689",
      "url": "https://patchblox.com/security/cve/CVE-2023-21689",
      "title": "Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability",
      "component": "Windows Protected EAP (PEAP)",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.26702,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21692",
      "url": "https://patchblox.com/security/cve/CVE-2023-21692",
      "title": "Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability",
      "component": "Windows Protected EAP (PEAP)",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.21403,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21688",
      "url": "https://patchblox.com/security/cve/CVE-2023-21688",
      "title": "NT OS Kernel Elevation of Privilege Vulnerability",
      "component": "Windows ALPC",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.03633,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21812",
      "url": "https://patchblox.com/security/cve/CVE-2023-21812",
      "title": "Windows Common Log File System Driver Elevation of Privilege Vulnerability",
      "component": "Windows Common Log File System Driver",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.03296,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21803",
      "url": "https://patchblox.com/security/cve/CVE-2023-21803",
      "title": "Windows iSCSI Discovery Service Remote Code Execution Vulnerability",
      "component": "Windows iSCSI",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.01765,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21808",
      "url": "https://patchblox.com/security/cve/CVE-2023-21808",
      "title": ".NET and Visual Studio Remote Code Execution Vulnerability",
      "component": ".NET and Visual Studio",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 8.4,
      "epss": 0.01148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21822",
      "url": "https://patchblox.com/security/cve/CVE-2023-21822",
      "title": "Windows Graphics Component Elevation of Privilege Vulnerability",
      "component": "Windows Win32K",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0077,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21816",
      "url": "https://patchblox.com/security/cve/CVE-2023-21816",
      "title": "Windows Active Directory Domain Services API Denial of Service Vulnerability",
      "component": "Windows Active Directory",
      "impact": "Denial of Service",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01735,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21700",
      "url": "https://patchblox.com/security/cve/CVE-2023-21700",
      "title": "Windows iSCSI Discovery Service Denial of Service Vulnerability",
      "component": "Windows iSCSI",
      "impact": "Denial of Service",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01654,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21701",
      "url": "https://patchblox.com/security/cve/CVE-2023-21701",
      "title": "Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability",
      "component": "Windows Protected EAP (PEAP)",
      "impact": "Denial of Service",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01654,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21702",
      "url": "https://patchblox.com/security/cve/CVE-2023-21702",
      "title": "Windows iSCSI Service Denial of Service Vulnerability",
      "component": "Windows iSCSI",
      "impact": "Denial of Service",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01654,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21811",
      "url": "https://patchblox.com/security/cve/CVE-2023-21811",
      "title": "Windows iSCSI Service Denial of Service Vulnerability",
      "component": "Windows iSCSI",
      "impact": "Denial of Service",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01654,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21813",
      "url": "https://patchblox.com/security/cve/CVE-2023-21813",
      "title": "Windows Secure Channel Denial of Service Vulnerability",
      "component": "Windows Cryptographic Services",
      "impact": "Denial of Service",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01654,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21691",
      "url": "https://patchblox.com/security/cve/CVE-2023-21691",
      "title": "Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability",
      "component": "Windows Protected EAP (PEAP)",
      "impact": "Information Disclosure",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01437,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21684",
      "url": "https://patchblox.com/security/cve/CVE-2023-21684",
      "title": "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability",
      "component": "Microsoft PostScript Printer Driver",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21685",
      "url": "https://patchblox.com/security/cve/CVE-2023-21685",
      "title": "Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability",
      "component": "Microsoft WDAC OLE DB provider for SQL",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.01217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21797",
      "url": "https://patchblox.com/security/cve/CVE-2023-21797",
      "title": "Microsoft ODBC Driver Remote Code Execution Vulnerability",
      "component": "Windows ODBC Driver",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.01188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21798",
      "url": "https://patchblox.com/security/cve/CVE-2023-21798",
      "title": "Microsoft ODBC Driver Remote Code Execution Vulnerability",
      "component": "Windows ODBC Driver",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.01188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21799",
      "url": "https://patchblox.com/security/cve/CVE-2023-21799",
      "title": "Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability",
      "component": "Microsoft WDAC OLE DB provider for SQL",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.01188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21686",
      "url": "https://patchblox.com/security/cve/CVE-2023-21686",
      "title": "Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability",
      "component": "Microsoft WDAC OLE DB provider for SQL",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.0116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21695",
      "url": "https://patchblox.com/security/cve/CVE-2023-21695",
      "title": "Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability",
      "component": "Windows Protected EAP (PEAP)",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01056,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21817",
      "url": "https://patchblox.com/security/cve/CVE-2023-21817",
      "title": "Windows Kerberos Elevation of Privilege Vulnerability",
      "component": "Windows Kerberos",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00784,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21805",
      "url": "https://patchblox.com/security/cve/CVE-2023-21805",
      "title": "Windows MSHTML Platform Remote Code Execution Vulnerability",
      "component": "Windows MSHTML Platform",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00737,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21802",
      "url": "https://patchblox.com/security/cve/CVE-2023-21802",
      "title": "Windows Media Remote Code Execution Vulnerability",
      "component": "Microsoft Windows Codecs Library",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00642,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21820",
      "url": "https://patchblox.com/security/cve/CVE-2023-21820",
      "title": "Windows Distributed File System (DFS) Remote Code Execution Vulnerability",
      "component": "Windows Distributed File System (DFS)",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.4,
      "epss": 0.00638,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21804",
      "url": "https://patchblox.com/security/cve/CVE-2023-21804",
      "title": "Windows Graphics Component Elevation of Privilege Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00422,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21801",
      "url": "https://patchblox.com/security/cve/CVE-2023-21801",
      "title": "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability",
      "component": "Microsoft PostScript Printer Driver",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00406,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21693",
      "url": "https://patchblox.com/security/cve/CVE-2023-21693",
      "title": "Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability",
      "component": "Microsoft PostScript Printer Driver",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.7,
      "epss": 0.01392,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21699",
      "url": "https://patchblox.com/security/cve/CVE-2023-21699",
      "title": "Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability",
      "component": "Internet Storage Name Service",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.3,
      "epss": 0.01112,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21722",
      "url": "https://patchblox.com/security/cve/CVE-2023-21722",
      "title": ".NET Framework Denial of Service Vulnerability",
      "component": ".NET Framework",
      "impact": "Denial of Service",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5,
      "epss": 0.00917,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21694",
      "url": "https://patchblox.com/security/cve/CVE-2023-21694",
      "title": "Windows Fax Service Remote Code Execution Vulnerability",
      "component": "Windows Fax and Scan Service",
      "impact": "Remote Code Execution",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.8,
      "epss": 0.00562,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21697",
      "url": "https://patchblox.com/security/cve/CVE-2023-21697",
      "title": "Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability",
      "component": "Internet Storage Name Service",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.2,
      "epss": 0.00497,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T06:34:28Z"
}