Microsoft · Security update · February 14, 2023

KB5022834: February 2023 cumulative update for Windows 10 20H2

KB5022834, released February 14, 2023, fixes 35 CVEs across 8 products. 2 of them are being exploited (CVE-2023-23376); 2 on CISA KEV. Patch Radar priority: Patch now.

Patch now2 on CISA KEVKnown ransomware use
CVEs closed
35
4 rated Critical
Exploited
2
CVE-2023-23376
Exploitation more likely
8
Vendor assessment
Highest EPSS
0.4317
98th percentile

Priority of the 35 CVEs

Patch now 2 Urgent 9 High 20 Routine 4

Applies to

Product
Windows 10 Version 20H2 for 32-bit Systems
Windows 10 Version 20H2 for ARM64-based Systems
Windows 10 Version 21H2 for 32-bit Systems
Windows 10 Version 21H2 for ARM64-based Systems
Windows 10 Version 21H2 for x64-based Systems
Windows 10 Version 22H2 for 32-bit Systems
Windows 10 Version 22H2 for ARM64-based Systems
Windows 10 Version 22H2 for x64-based Systems

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2023-23376 Windows Common Log File System Driver Elevation of Privilege 7.8 0.1085 KEVRansomwareExploited
Patch now CVE-2023-21823 Microsoft Graphics Component Remote Code Execution 7.3 0.0556 KEVExploited
Urgent CVE-2023-21818 Windows SChannel Denial of Service 7.5 0.4317 More likely
Urgent CVE-2023-21819 Windows Cryptographic Services Denial of Service 7.5 0.3081 More likely
Urgent CVE-2023-21690 Windows Protected EAP (PEAP) Remote Code Execution 9.8 0.2774 More likely
Urgent CVE-2023-21689 Windows Protected EAP (PEAP) Remote Code Execution 9.8 0.2670 More likely
Urgent CVE-2023-21692 Windows Protected EAP (PEAP) Remote Code Execution 9.8 0.2140 More likely
Urgent CVE-2023-21688 Windows ALPC Elevation of Privilege 7.8 0.0363 More likely
Urgent CVE-2023-21812 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0330 More likely
Urgent CVE-2023-21803 Windows iSCSI Remote Code Execution 9.8 0.0177 Exploitation Less Likely
Urgent CVE-2023-21822 Windows Win32K Elevation of Privilege 7.8 0.0077 More likely
High CVE-2023-21816 Windows Active Directory Denial of Service 7.5 0.0174 Exploitation Less Likely
High CVE-2023-21700 Windows iSCSI Denial of Service 7.5 0.0165 Exploitation Less Likely
High CVE-2023-21701 Windows Protected EAP (PEAP) Denial of Service 7.5 0.0165 Exploitation Less Likely
High CVE-2023-21702 Windows iSCSI Denial of Service 7.5 0.0165 Exploitation Less Likely
High CVE-2023-21811 Windows iSCSI Denial of Service 7.5 0.0165 Exploitation Less Likely
High CVE-2023-21813 Windows Cryptographic Services Denial of Service 7.5 0.0165 Exploitation Less Likely
High CVE-2023-21691 Windows Protected EAP (PEAP) Information Disclosure 7.5 0.0144 Exploitation Less Likely
High CVE-2023-21684 Microsoft PostScript Printer Driver Remote Code Execution 8.8 0.0130 Exploitation Less Likely
High CVE-2023-21685 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0122 Exploitation Less Likely
High CVE-2023-21797 Windows ODBC Driver Remote Code Execution 8.8 0.0119 Exploitation Less Likely
High CVE-2023-21798 Windows ODBC Driver Remote Code Execution 8.8 0.0119 Exploitation Less Likely
High CVE-2023-21799 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0119 Exploitation Less Likely
High CVE-2023-21686 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0116 Exploitation Less Likely
High CVE-2023-21695 Windows Protected EAP (PEAP) Remote Code Execution 7.5 0.0106 Exploitation Less Likely
Showing 1 to 25 of 35 1Next