Microsoft · Security update · February 14, 2023

KB5022858: February 2023 cumulative update for Windows 10 1507

KB5022858, released February 14, 2023, fixes 36 CVEs across 4 products. 2 of them are being exploited (CVE-2023-23376); 2 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now2 on CISA KEVKnown ransomware useUnsupported product
CVEs closed
36
5 rated Critical
Exploited
2
CVE-2023-23376
Exploitation more likely
7
Vendor assessment
Highest EPSS
0.4317
98th percentile

Priority of the 36 CVEs

Patch now 2 Urgent 9 High 20 Routine 5

Applies to

ProductBuild after install
Microsoft .NET Framework 3.5 and 4.6.2 on Windows 10 for 32-bit Systems10240.19747
Microsoft .NET Framework 3.5 and 4.6.2 on Windows 10 for x64-based Systems10240.19747
Windows 10 for 32-bit Systems10240.19747
Windows 10 for x64-based Systems10240.19747

CVEs this fix closes

PriorityCVEComponentImpactCVSSEPSSExploitation
Patch now CVE-2023-23376 Windows Common Log File System Driver Elevation of Privilege 7.8 0.1085 KEVRansomwareExploited
Patch now CVE-2023-21823 Microsoft Graphics Component Remote Code Execution 7.3 0.0556 KEVExploited
Urgent CVE-2023-21818 Windows SChannel Denial of Service 7.5 0.4317 More likely
Urgent CVE-2023-21690 Windows Protected EAP (PEAP) Remote Code Execution 9.8 0.2774 More likely
Urgent CVE-2023-21689 Windows Protected EAP (PEAP) Remote Code Execution 9.8 0.2670 More likely
Urgent CVE-2023-21692 Windows Protected EAP (PEAP) Remote Code Execution 9.8 0.2140 More likely
Urgent CVE-2023-21688 Windows ALPC Elevation of Privilege 7.8 0.0363 More likely
Urgent CVE-2023-21812 Windows Common Log File System Driver Elevation of Privilege 7.8 0.0330 More likely
Urgent CVE-2023-21803 Windows iSCSI Remote Code Execution 9.8 0.0177 Exploitation Less Likely
Urgent CVE-2023-21808 .NET and Visual Studio Remote Code Execution 8.4 0.0115 Exploitation Less Likely
Urgent CVE-2023-21822 Windows Win32K Elevation of Privilege 7.8 0.0077 More likely
High CVE-2023-21816 Windows Active Directory Denial of Service 7.5 0.0174 Exploitation Less Likely
High CVE-2023-21700 Windows iSCSI Denial of Service 7.5 0.0165 Exploitation Less Likely
High CVE-2023-21701 Windows Protected EAP (PEAP) Denial of Service 7.5 0.0165 Exploitation Less Likely
High CVE-2023-21702 Windows iSCSI Denial of Service 7.5 0.0165 Exploitation Less Likely
High CVE-2023-21811 Windows iSCSI Denial of Service 7.5 0.0165 Exploitation Less Likely
High CVE-2023-21813 Windows Cryptographic Services Denial of Service 7.5 0.0165 Exploitation Less Likely
High CVE-2023-21691 Windows Protected EAP (PEAP) Information Disclosure 7.5 0.0144 Exploitation Less Likely
High CVE-2023-21684 Microsoft PostScript Printer Driver Remote Code Execution 8.8 0.0130 Exploitation Less Likely
High CVE-2023-21685 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0122 Exploitation Less Likely
High CVE-2023-21797 Windows ODBC Driver Remote Code Execution 8.8 0.0119 Exploitation Less Likely
High CVE-2023-21798 Windows ODBC Driver Remote Code Execution 8.8 0.0119 Exploitation Less Likely
High CVE-2023-21799 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0119 Exploitation Less Likely
High CVE-2023-21686 Microsoft WDAC OLE DB provider for SQL Remote Code Execution 8.8 0.0116 Exploitation Less Likely
High CVE-2023-21695 Windows Protected EAP (PEAP) Remote Code Execution 7.5 0.0106 Exploitation Less Likely
Showing 1 to 25 of 36 1Next