{
  "fix": "KB5022890",
  "url": "https://patchblox.com/security/fix/microsoft/kb5022890",
  "summary": "KB5022890, released February 14, 2023, fixes 32 CVEs across 4 products. 2 of them are being exploited (CVE-2023-23376); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.",
  "platform": "microsoft",
  "type": "kb",
  "releaseKind": "Security",
  "title": "February 2023 security update",
  "released": "2023-02-14T14:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2023-23376, exploited (CISA KEV, ransomware)",
  "supported": false,
  "cveCount": 32,
  "exploitedCveCount": 2,
  "kevCveCount": 2,
  "ransomwareCveCount": 1,
  "maxEpss": 0.43172,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://support.microsoft.com/help/5022890",
  "appliesTo": [
    {
      "product": "Windows Server 2008 for 32-bit Systems Service Pack 2",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-server-2008-for-32-bit-systems-service-pack-2",
      "fixedVersion": "",
      "supported": false
    },
    {
      "product": "Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-server-2008-for-32-bit-systems-service-pack-2-server-core-installation",
      "fixedVersion": "",
      "supported": false
    },
    {
      "product": "Windows Server 2008 for x64-based Systems Service Pack 2",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-server-2008-for-x64-based-systems-service-pack-2",
      "fixedVersion": "",
      "supported": false
    },
    {
      "product": "Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)",
      "productUrl": "https://patchblox.com/security/product/microsoft/windows-server-2008-for-x64-based-systems-service-pack-2-server-core-installation",
      "fixedVersion": "",
      "supported": false
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2023-23376",
      "url": "https://patchblox.com/security/cve/CVE-2023-23376",
      "title": "Windows Common Log File System Driver Elevation of Privilege Vulnerability",
      "component": "Windows Common Log File System Driver",
      "impact": "Elevation of Privilege",
      "priority": "Patch now",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.10853,
      "kev": true,
      "ransomware": true,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21823",
      "url": "https://patchblox.com/security/cve/CVE-2023-21823",
      "title": "Windows Graphics Component Remote Code Execution Vulnerability",
      "component": "Microsoft Graphics Component",
      "impact": "Remote Code Execution",
      "priority": "Patch now",
      "severity": "Important",
      "cvss": 7.3,
      "epss": 0.05563,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21818",
      "url": "https://patchblox.com/security/cve/CVE-2023-21818",
      "title": "Windows Secure Channel Denial of Service Vulnerability",
      "component": "Windows SChannel",
      "impact": "Denial of Service",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.43172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21692",
      "url": "https://patchblox.com/security/cve/CVE-2023-21692",
      "title": "Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability",
      "component": "Windows Protected EAP (PEAP)",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.21403,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21688",
      "url": "https://patchblox.com/security/cve/CVE-2023-21688",
      "title": "NT OS Kernel Elevation of Privilege Vulnerability",
      "component": "Windows ALPC",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.03633,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21812",
      "url": "https://patchblox.com/security/cve/CVE-2023-21812",
      "title": "Windows Common Log File System Driver Elevation of Privilege Vulnerability",
      "component": "Windows Common Log File System Driver",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.03296,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21803",
      "url": "https://patchblox.com/security/cve/CVE-2023-21803",
      "title": "Windows iSCSI Discovery Service Remote Code Execution Vulnerability",
      "component": "Windows iSCSI",
      "impact": "Remote Code Execution",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.01765,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21822",
      "url": "https://patchblox.com/security/cve/CVE-2023-21822",
      "title": "Windows Graphics Component Elevation of Privilege Vulnerability",
      "component": "Windows Win32K",
      "impact": "Elevation of Privilege",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0077,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21816",
      "url": "https://patchblox.com/security/cve/CVE-2023-21816",
      "title": "Windows Active Directory Domain Services API Denial of Service Vulnerability",
      "component": "Windows Active Directory",
      "impact": "Denial of Service",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01735,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21700",
      "url": "https://patchblox.com/security/cve/CVE-2023-21700",
      "title": "Windows iSCSI Discovery Service Denial of Service Vulnerability",
      "component": "Windows iSCSI",
      "impact": "Denial of Service",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01654,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21701",
      "url": "https://patchblox.com/security/cve/CVE-2023-21701",
      "title": "Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability",
      "component": "Windows Protected EAP (PEAP)",
      "impact": "Denial of Service",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01654,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21702",
      "url": "https://patchblox.com/security/cve/CVE-2023-21702",
      "title": "Windows iSCSI Service Denial of Service Vulnerability",
      "component": "Windows iSCSI",
      "impact": "Denial of Service",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01654,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21811",
      "url": "https://patchblox.com/security/cve/CVE-2023-21811",
      "title": "Windows iSCSI Service Denial of Service Vulnerability",
      "component": "Windows iSCSI",
      "impact": "Denial of Service",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01654,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21813",
      "url": "https://patchblox.com/security/cve/CVE-2023-21813",
      "title": "Windows Secure Channel Denial of Service Vulnerability",
      "component": "Windows Cryptographic Services",
      "impact": "Denial of Service",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01654,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21691",
      "url": "https://patchblox.com/security/cve/CVE-2023-21691",
      "title": "Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability",
      "component": "Windows Protected EAP (PEAP)",
      "impact": "Information Disclosure",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01437,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21684",
      "url": "https://patchblox.com/security/cve/CVE-2023-21684",
      "title": "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability",
      "component": "Microsoft PostScript Printer Driver",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21685",
      "url": "https://patchblox.com/security/cve/CVE-2023-21685",
      "title": "Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability",
      "component": "Microsoft WDAC OLE DB provider for SQL",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.01217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21797",
      "url": "https://patchblox.com/security/cve/CVE-2023-21797",
      "title": "Microsoft ODBC Driver Remote Code Execution Vulnerability",
      "component": "Windows ODBC Driver",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.01188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21798",
      "url": "https://patchblox.com/security/cve/CVE-2023-21798",
      "title": "Microsoft ODBC Driver Remote Code Execution Vulnerability",
      "component": "Windows ODBC Driver",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.01188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21799",
      "url": "https://patchblox.com/security/cve/CVE-2023-21799",
      "title": "Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability",
      "component": "Microsoft WDAC OLE DB provider for SQL",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.01188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21686",
      "url": "https://patchblox.com/security/cve/CVE-2023-21686",
      "title": "Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability",
      "component": "Microsoft WDAC OLE DB provider for SQL",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.0116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21800",
      "url": "https://patchblox.com/security/cve/CVE-2023-21800",
      "title": "Windows Installer Elevation of Privilege Vulnerability",
      "component": "Windows Installer",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.01066,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21695",
      "url": "https://patchblox.com/security/cve/CVE-2023-21695",
      "title": "Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability",
      "component": "Windows Protected EAP (PEAP)",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01056,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21817",
      "url": "https://patchblox.com/security/cve/CVE-2023-21817",
      "title": "Windows Kerberos Elevation of Privilege Vulnerability",
      "component": "Windows Kerberos",
      "impact": "Elevation of Privilege",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00784,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21805",
      "url": "https://patchblox.com/security/cve/CVE-2023-21805",
      "title": "Windows MSHTML Platform Remote Code Execution Vulnerability",
      "component": "Windows MSHTML Platform",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00737,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21802",
      "url": "https://patchblox.com/security/cve/CVE-2023-21802",
      "title": "Windows Media Remote Code Execution Vulnerability",
      "component": "Microsoft Windows Codecs Library",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00642,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21820",
      "url": "https://patchblox.com/security/cve/CVE-2023-21820",
      "title": "Windows Distributed File System (DFS) Remote Code Execution Vulnerability",
      "component": "Windows Distributed File System (DFS)",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.4,
      "epss": 0.00638,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21801",
      "url": "https://patchblox.com/security/cve/CVE-2023-21801",
      "title": "Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability",
      "component": "Microsoft PostScript Printer Driver",
      "impact": "Remote Code Execution",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00406,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21693",
      "url": "https://patchblox.com/security/cve/CVE-2023-21693",
      "title": "Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability",
      "component": "Microsoft PostScript Printer Driver",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.7,
      "epss": 0.01392,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21699",
      "url": "https://patchblox.com/security/cve/CVE-2023-21699",
      "title": "Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability",
      "component": "Internet Storage Name Service",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.3,
      "epss": 0.01112,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21694",
      "url": "https://patchblox.com/security/cve/CVE-2023-21694",
      "title": "Windows Fax Service Remote Code Execution Vulnerability",
      "component": "Windows Fax and Scan Service",
      "impact": "Remote Code Execution",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.8,
      "epss": 0.00562,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-21697",
      "url": "https://patchblox.com/security/cve/CVE-2023-21697",
      "title": "Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability",
      "component": "Internet Storage Name Service",
      "impact": "Information Disclosure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.2,
      "epss": 0.00497,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T06:34:28Z"
}